← Back
Legal · Cookies

Cookies Policy

Last updated · August 2026

§01

The short version

ALAN uses a small, fixed set of cookies to sign you in and keep the site working, plus browser local storage for your preferences. Our analytics service (Plausible) is cookieless. We run no advertising trackers, no cross-site cookies, and we do not use cookies to build advertising profiles or to follow you around the web.
§02

Everything we set

next-auth.session-tokenCookie, httpOnly
Keeps you signed in. Set at login or when you verify your email.
Lifetime: Session length; cleared on sign out
next-auth.csrf-tokenCookie, httpOnly
Protects forms against cross-site request forgery.
Lifetime: Session
next-auth.callback-urlCookie
Returns you to the page you came from after signing in.
Lifetime: Session
alan-srcCookie, httpOnly
Remembers which link brought you here (for example a home page button), so we can tell which parts of the site are useful. Contains a short label, never your identity.
Lifetime: 7 days
alan-cookie-consentlocalStorage
Records your answer to the cookie banner so we do not ask again.
Lifetime: Until you clear browser data
PreferenceslocalStorage
Interface preferences such as theme and layout choices, kept on your device.
Lifetime: Until you clear browser data
§03

Third parties

Stripe sets its own cookies during checkout on Stripe-hosted pages, governed by Stripe's policies. Plausible analytics uses no cookies at all. There are no other third-party cookies on the platform.
§04

Your choices

You can decline non-essential storage in the cookie banner, and every browser lets you block or delete cookies in its settings. If you block the session cookie you will not be able to stay signed in; everything public on the site still works.
§05

Related documents

See the Privacy Policy (Section 7 covers cookies and similar technologies in legal detail) and Policies & security.