Cookie Policy

We use a secure, httpOnly session cookie to keep you signed in, and same-origin protections to prevent cross-site request forgery. These are essential; the app cannot function without them.

The public scan uses Cloudflare Turnstile, which may set its own cookies to distinguish humans from automated abuse. This runs only on the scan widget.

If you accept analytics in our cookie banner, Google Analytics 4 sets its own cookies (for example _ga) to measure site usage, with IP anonymisation. Analytics stay off until you accept (we use Google Consent Mode, denied by default) and you can decline or clear these cookies at any time. We do not use advertising cookies or sell data to advertisers.

Because our cookies are strictly necessary, blocking them will prevent sign-in. You can clear cookies from your browser at any time; doing so will sign you out.