Cookie statement
Short version: only the cookies that keep you signed in. No advertising cookies, no tracking pixels, no third party profiling, and so no banner to click away.
Last updated 1 September 2026
Why there is no cookie banner
Dutch telecoms law (art. 11.7a Telecommunicatiewet) and the GDPR require consent for cookies, unless a cookie is strictly necessary to deliver a service you asked for. Everything below is strictly necessary: without it you could not stay signed in. Analytics on this site are cookieless and aggregated, which is the exception in art. 11.7a lid 3 as well.
What is stored
| Name | What it does | How long |
|---|---|---|
| better-auth.session_token | Keeps you signed in. Without it every click would ask you to sign in again. | 30 days |
| better-auth.session_data | Short lived cache of your session so pages do not hit the database on every request. | 5 minutes |
| better-auth.state / better-auth.pkce | Protects the sign in redirect to Google or Discord against tampering. | Until sign in finishes |
| theme, floormap-accent (local storage, not a cookie) | Remembers light or dark mode and your accent colour. Never leaves your browser. | Until you clear your browser data |
Session cookies are set by better-auth on our own domain, are HTTP only, and cannot be read by scripts. The theme and accent settings live in your browser's local storage and are never sent anywhere.
Analytics
Page views and loading times are measured with Vercel Analytics and Vercel Speed Insights. Neither sets a cookie, neither stores an IP address in a way that identifies you, and neither builds a profile. The numbers we see are counts per page, not people.
Third party cookies
Signing in with Google or Discord sends you to their site, where their own cookies apply, and a payment sends you to Stripe, where Stripe's do. Once you are back here, only the cookies in the table above remain.
Getting rid of them
Sign out and the session cookies are gone. Clearing site data in your browser removes the rest, including the theme setting. Blocking cookies for this site is fine as well, you simply will not be able to sign in.
More on what happens to the data behind the session is in the privacy policy.