Cookies
The small files this site stores on your device, what each one is for, and which of them you get to decide about.
What we use cookies for
Three things: keeping you signed in, keeping our forms secure, and — only if you agree to it — counting how many people visit. The first two happen automatically because the site cannot work without them. The third is your choice, and it is off until you make it.
We do not use cookies to advertise to you, and we do not sell anything about you to anyone.
Cookies this site sets
Every cookie below is here for one of two reasons: the site cannot work without it, or you chose Accept when we asked about analytics. The What it does column says which.
| Name | What it does | How long it lasts |
|---|---|---|
| next-auth.session-token | Keeps you signed in as you move between pages. Essential; cannot be switched off. | Until you sign out, or 30 days. |
| next-auth.csrf-token | Protects sign-in and sign-out from being triggered by another website. Essential. | Until you close your browser. |
| next-auth.callback-url | Remembers which page to return you to after signing in. Essential. | Until you close your browser. |
| awujo_analytics_consent | Records only whether you accepted or declined analytics, and when. It contains nothing that identifies you. Essential to honouring your choice, so it is set without asking. | Six months, or until you clear it with Cookie settings. |
| awujo_analytics_dismissed | Records only that you closed the analytics question without answering, so we do not ask again for the rest of your visit. It says nothing about you and does not record an answer. | Until you close your browser. |
On the live site these names carry a prefix that browsers require for cookies sent only over HTTPS. You will see __Secure-next-auth.session-token and __Secure-next-auth.callback-url, and — because a CSRF token gets a stricter rule still — __Host-next-auth.csrf-token. Those are the same three cookies listed above.
Only if you say yes
These are not set unless you agree to the visit counting described below. If you have not answered, or you said no, they are not on your device and this website has asked Google for nothing.
| Name | What it does | How long it lasts |
|---|---|---|
| _ga | Google Analytics uses this to recognise your browser between visits, so that two visits by you are not counted as two different people. | Two years from your most recent visit. |
| _ga_<id> | Google Analytics uses this to keep track of a single visit — when it started and whether it is still going. | Two years from your most recent visit. |
The second name ends in a code identifying this website, so in your browser you will see something like _ga_ABCDE12345 rather than the name printed here. Google sets both of these, not us, and their lifetimes are Google’s — we have described them as Google documents them.
How we count visits
We do not count your visit unless you tell us we may. Until you accept, and if you decline, nothing here measures you and nothing about your visit is sent anywhere.
If you accept, we use Google Analytics to see which pages people read and how many people read them. The cookies it sets are listed in the table above. Your visit is sent to Google, who provide the service; our privacy policy explains what we hold, why, and what you can ask us to do about it.
Two limits are built into the site rather than promised. Analytics never runs on the pages you see once you are signed in — your dashboard and the admin pages are excluded outright, so what a member does inside their own account is never measured. And we never send Google your name, your email address, or anything from your membership record.
You can change your mind whenever you like: Cookie settings, at the bottom of every page.
Our privacy policy sets out everything else we hold about you and why.
You decide whether we count your visit
When you first arrive we ask you one question: may we use Google Analytics to see which pages people read?
Nothing is stored on your device for analytics until you answer. If you choose Reject, nothing analytics-related loads at all — no cookie, no script, nothing sent to Google.
If you close the question without answering, we take that as no for now. Nothing about your visit is measured. The one thing we do store is a note that you closed it, so we stop asking for the rest of your visit — and that note goes when you close your browser. We will ask you again another time.
If you choose Accept, we set the analytics cookies listed in the table above, and nothing beyond them.
You can change your mind at any time. Cookie settings, at the bottom of every page, reopens the question. Choosing Reject there removes the analytics cookies straight away — you do not have to reload the page or take our word for it.
The cookies that keep you signed in and keep our forms secure are not part of this choice. The site cannot work without them, so we list them rather than ask about them.
More detail
Our privacy policy explains everything else we hold about you, why, and for how long.