Cookie Policy

Essential cookies keep member and staff sessions working:

• session — an httpOnly token that keeps you signed in for 30 days. Only its hash is stored in the database.
• altijar_admin — the staff/admin desk session, used only inside admin routes.

First-party page-view analytics are collected only after you choose “Accept all” or turn analytics on under “Customize”. We store normalized page paths without query strings, broad referrer sources without their paths, and one-way hashes of random browser and daily session identifiers to estimate traffic. We do not store IP addresses or account IDs in page-view records. These analytics cookies are httpOnly; the browser identifier expires after one year and the session identifier after one day. If a Google Analytics measurement ID is configured, Google Analytics also loads after consent and may set first-party cookies named _ga and _ga_<measurement-id>. We do not load advertising tags. Choose “Reject optional” to keep analytics off, or reopen Cookie preferences in the footer to change your choice. Your preference is saved in local storage and reflected in a consent cookie so the server can honor it.

Your consent choice and small display preferences (chat read markers, your profile card draft, saved searches) are kept in your browser’s local storage. They are not sent to the server except when you explicitly save them through a form. The choice is tied to this site’s address, so a different preview link or domain may ask again.

Signing out invalidates your session cookie on the server. Clearing site data in your browser removes the rest without affecting your account.