Cookies

What is set, and why

• Session - keeps you signed in on the dashboard and the console. Not readable by JavaScript.
• CSRF token - a signed value that a form or request has to echo back. Readable by the page, deliberately: that is how it is echoed.
• Guest - set when a guest opens their personal invitation link, so the pages of that one event know who they are. Scoped to that event and to nothing else.
• Event access - set when someone enters the password for a private event.
• Language - set only when a visitor picks a language themselves.

What is not set

No advertising cookies, no third-party analytics, and nothing that follows a visitor between different people. There is no cookie banner because there is nothing on this site that needs consent.