1. What these are
A cookie is a small file this site stores on your device so it can recognise you on the next request. The site also uses local storage, which works similarly but is never sent to the server. Both are covered here.
2. What this site actually sets
Four things, and this is the complete list.
authjs.session-token— your signed-in session. Written when you sign in, cleared when you sign out.authjs.csrf-token— stops a third-party site forging a sign-in request on your behalf.authjs.callback-url— remembers which page to return you to after sign-in.mdn-theme— the theme you picked. This one is local storage, not a cookie, and never leaves your browser.
The three session cookies are required. Block them and you can still read every public page, but you cannot sign in.
3. Analytics
We count page views in aggregate to see which material earns its place. We set no advertising cookies and we do not track you across other sites. If that ever changes, this page changes first, and we will ask before setting anything.
4. Third parties
Our hosting providers may set their own cookies for routing and caching, under their own policies. No advertiser receives your data. The site has no third-party sign-in, so no social network is told when you visit.
5. Turning them off
- Your browser can block or delete cookies for this site. Every major browser has this under privacy settings.
- Signing out clears the session cookie immediately.
- A private window discards everything when you close it.
6. Do Not Track
We honour Do Not Track for analytics. The session cookies above are still needed for signing in to work at all.
7. Changes
If the list in section 2 changes, this page changes with it.
8. Contact
Questions about any of this: mec.designnexus@gmail.com