Cookie Policy
The JustMyth website uses only cookies that are strictly necessary for signing in. There are no analytics, advertising or tracking cookies, so there is no cookie banner.
1. What we set
Browsing the public pages sets no cookies at all. Cookies are set only when you sign in, and only the ones listed below. Over plain HTTP (local development) the same cookies are used without the __Secure- / __Host- prefixes. All of them are HTTP-only, so page scripts cannot read them, and are sent only to this website.
| Cookie | Set | Purpose | Lasts |
|---|---|---|---|
__Secure-authjs.session-token | After you sign in | Keeps you signed in. Holds a random session ID that points to your session record; no profile data. | 30 days, renewed while you use the site; removed when you sign out |
__Host-authjs.csrf-token | On the sign-in pages | Protects sign-in and sign-out against cross-site request forgery. | Browser session |
__Secure-authjs.callback-url | During sign-in | Remembers which page to return you to after signing in. | Browser session |
__Secure-authjs.pkce.code_verifier, __Secure-authjs.state | Only during “Continue with GitHub” | Security checks that tie the GitHub sign-in response to your browser. | About 15 minutes |
2. What we don't use
No analytics, advertising, social-media or cross-site tracking cookies, no tracking pixels, and no local or session storage for tracking. Fonts and images are served from this website, so viewing a page does not contact third-party content networks.
3. Bot protection
The sign-in, waitlist, contact and new-thread forms are protected by Cloudflare Turnstile. Its script loads from Cloudflare only on pages with those forms. Cloudflare describes the browser signals Turnstile processes as strictly necessary to tell people from bots and does not use them for advertising; see the Cloudflare Turnstile Privacy Addendum.
4. Why there is no banner
Privacy laws such as the EU ePrivacy rules require consent for cookies that are not strictly necessary. Every cookie above is needed to provide sign-in, which you request, so we do not ask for consent and do not show a banner. If we ever add optional cookies such as analytics, we will update this page first and ask for your consent before setting them.
5. Controlling cookies
You can block or delete cookies in your browser settings. The public pages work without cookies; signing in and posting in the community need the session cookie. Signing out removes it.
6. Contact
Questions about cookies can be sent to devtmj@apeironlabs.tech. See also the Privacy Policy.