Cookies
Cookie notice
Reading this site sets no cookies. There is no banner because there is nothing to ask you to agree to — the two cookies below are issued only after an editor signs in to the administrative interface, and neither is used for analytics or advertising.
| Name | Kind | Purpose | Lifetime | Set for |
|---|---|---|---|---|
| juvelaw_admin_session | Cookie — strictly necessary | Holds an opaque session token for a signed-in editor. It carries no personal data itself; it is a random string matched against a row in the database. HttpOnly, Secure, SameSite=Lax. | 8 hours, or until sign-out | Signed-in administrators only |
| juvelaw_csrf | Cookie — strictly necessary | A double-submit token that proves an administrative form was submitted from this site. Compared against a matching value in the form body. | 1 hour | Signed-in administrators only |
| juvelaw-theme | Local storage — not a cookie | Remembers whether you chose the light or dark theme. Read by a small script before the page paints, so the theme does not flash. It stores one word and is never sent to the server. | Until you clear your browser storage | Anyone who uses the theme toggle |
| __cf_bm | Cookie — strictly necessary, set by Cloudflare | Cloudflare’s bot-management cookie. It is set by the network that serves this site, not by this site, and only when those protections are engaged for a request. It distinguishes automated traffic from human traffic and is not used for advertising or profiling. | 30 minutes | Some visitors, depending on Cloudflare’s assessment of the request |
What is deliberately not used
None of the following is present anywhere in this site's code, and none of it is loaded from any page:
- Google Analytics, Google Tag Manager, Google Ads and DoubleClick tags
- Google Fonts and any other externally hosted webfont
- Meta (Facebook) pixel, Instagram embeds
- LinkedIn Insight tag, X (Twitter) conversion or universal tags, TikTok pixel
- Plausible, Fathom, Matomo, Simple Analytics, Umami and every other analytics product
- Hotjar, FullStory, Microsoft Clarity and other session-recording or heatmap tools
- Intercom, Drift, Crisp and other chat widgets
- Disqus and other hosted comment systems
- YouTube, Vimeo, Google Maps and other third-party embeds that would see your request
- A/B testing and personalisation platforms
- Consent-management platforms, which would themselves need a cookie to work
- Browser fingerprinting, cross-site identifiers, and advertising IDs
This is not a promise about the future; it is a description of the current build, and it is checkable — open your browser's network panel on any page of this site and every request will be to this domain.
Refusing or removing them
Blocking cookies from this domain has no effect on reading anything: every page, table and download works without them. The only consequence is that the administrative interface cannot keep an editor signed in, which will not affect you unless you are one.
Clearing your browser's local storage removes the theme preference, and the site returns to following your operating system's light or dark setting.
Related
The privacy notice covers what is collected when you use a form or subscribe, how long it is kept, and your rights over it. The terms cover reuse of the data.