Cookies
One cookie to keep you signed in, one bot check on the login pages, and nothing else. This page names all of it.
Last updated
The short version
Titan sets one cookie, and it is the one that keeps you signed in. Cloudflare’s bot check sets its own storage on its own domain when you visit the sign-up, sign-in or password-reset pages. That is the complete list.
There is no analytics package on this site, no advertising, no tag manager, no tracking pixel and no third-party embed. Nothing here follows you to another site, and nothing about your visit is sold or shared for marketing.
The wider picture — what is stored in the database rather than in your browser, and what you can ask us to delete — is in the privacy policy.
What is set, and why
Both entries below are strictly necessary: the site either cannot sign you in or cannot defend its sign-up form without them.
| Name | Set by | What it does | How long |
|---|---|---|---|
sb-<project>-auth-token | Titan (this site) | Keeps you signed in. Holds the session token issued when you log in, and is refreshed on each request. Split across numbered cookies when the token is too long for one. | Until you sign out, or the session expires. |
Cloudflare Turnstile storage | Cloudflare, on challenges.cloudflare.com | The bot check on the sign-up, sign-in and password-reset pages. Set by Cloudflare on their own domain, not ours, and only on those three pages. | Short-lived; controlled by Cloudflare. |
The session cookie is HTTP-only: scripts running in the page cannot read it, which is what stops a cross-site scripting bug from turning into a stolen session. It is also marked SameSite, so another site cannot cause your browser to send it.
Storage that is not a cookie
Two other browser features store things, and the law treats them the same way cookies are treated, so they are listed here too:
- Held quotes. When you select text from several posts to quote them in one reply, the held quotes are kept in your browser’s session storage so an accidental navigation does not lose them. They are cleared when you insert them, and they disappear when you close the tab. They never leave your browser until you post the reply.
- Post drafts are the opposite: they are saved on the server, against your account, so a draft started on a phone is there on a desktop. They are covered in the privacy policy, not here, because they are not browser storage. Only you can read your drafts — not staff.
Turning them off
You can clear or block cookies for this site in your browser’s settings at any time. What happens if you do:
- Clearing the session cookie signs you out. Nothing else is lost — your account, posts and drafts are on the server.
- Blocking cookies entirely means you cannot stay signed in. Reading the public forums still works.
- Blocking challenges.cloudflare.com may stop the sign-up, sign-in and password-reset forms from being submitted, since the bot check cannot complete.
Signing out from the menu is the tidier version of the first one: it also invalidates the session on the server rather than only in your browser.
If this ever changes
This page is dated. If something is added, the date moves and the table grows — and if what is added is not strictly necessary, a consent banner appears with it.
Questions about anything here can go to any administrator listed on the staff page.