Cookie Policy

Cookies are small text files a website stores in your browser. They let the site remember things between pages, such as the fact that you are signed in.

All of these are strictly necessary, so they do not need your consent:

• Sign-in session (authjs.session-token) — keeps you signed in. Lasts until you sign out or the session expires.

• Security token (authjs.csrf-token) — protects forms and sign-in against cross-site request forgery. Session cookie.

• Sign-in redirect (authjs.callback-url) — returns you to the right page after signing in. Session cookie.

• Sign-in verification (turklyco-oauth-proof) — briefly confirms a Google or Apple sign-in. Expires within minutes.

• Payments — on the checkout page, Stripe sets cookies (such as __stripe_mid and __stripe_sid) to process payments and prevent fraud.

• Network security — Cloudflare may set cookies (such as __cf_bm) to protect the site from bots and attacks.

We use your browser's session storage to remember small, temporary choices — for example that you closed a pop-up or chose to discard unsaved changes. It is cleared when you close the tab.

We do not use advertising cookies, cross-site tracking or third-party analytics cookies. If that changes, we will update this policy and ask for your consent first where the law requires it.

You can block or delete cookies in your browser settings. Because our cookies are essential, blocking them will stop sign-in and checkout from working.

We will update this policy and its effective date if the cookies we use change. See our Privacy Policy for more about how we handle personal data.