# Cookie notice

Last updated 20 October 2026. We use as few cookies as we can. Nothing optional runs until you say yes, and we have no advertising or cross-site tracking cookies.

## Your choice

On your first visit we ask whether you allow analytics. Accept all and Reject non-essential carry the same weight, and the site works the same either way. Manage preferences lets you choose category by category; nothing optional is switched on in advance.

You can change or withdraw your choice at any time with Cookie settings at the bottom of every page (or in the dashboard menu). Withdrawing stops analytics straight away and removes any analytics cookies and storage we can reach.

We keep your choice for 6 months, then ask again. We also ask again if this notice changes in a way that needs a new choice.

## Global Privacy Control

If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of analytics and marketing, and the cookie banner tells you so. It applies wherever you live.

## Strictly necessary

These keep the site working. Under the law they don't need consent, and you can't switch them off in Cookie settings.

- tf_member (first-party cookie, strictly necessary): a signed session set once you confirm your email with the code we send, so you stay signed in and your stars count once. Lasts 12 months.
- tf_consent (first-party cookie, strictly necessary): remembers your cookie choice: which categories you allowed, the notice version, when you chose, and whether GPC applied. Lasts 6 months.
- tf-theme (local storage, strictly necessary): remembers light or dark theme if you pick one with the theme switch. Stays until you pick System or clear your browser data. Nothing is sent to us.

## Analytics (only with your consent)

- Vercel Web Analytics: counts page views, referrers, and browser, device type and country. It sets no cookies and stores nothing on your device. Visitors are told apart for a day by a hash of request data with a daily salt, so they can't be followed across days or sites.
- Vercel Speed Insights: measures how fast pages load (Core Web Vitals) on your device. It sets no cookies and stores nothing on your device.
- Why we ask, even though these set no cookies: EU and UK rules cover reading information from your device, not just cookies, so we load these scripts only after you allow analytics.

## Marketing

We use no marketing or advertising cookies. If that ever changes, it will be a separate category that stays off until you turn it on.

## Sale and sharing (US)

We don't sell your personal information or share it for cross-context behavioural advertising, as defined by California and similar US state laws. The Do Not Sell or Share My Personal Information link at the bottom of every page still lets you record an opt-out, which also turns off analytics on that browser.

## For developers

The site sets Google Consent Mode v2 defaults (all denied) in page memory before any other script, so a Google tag added later can't send data before consent. This stores nothing on your device.