What cookies are
Cookies are small text files that a website stores in your browser. Browser storage (“local storage”) is a similar place where a site can keep settings on your device. Neither is used here to track you across other sites.
What we use
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| authjs.session-token | Keeps you signed in | Up to 30 days, or until you sign out | Strictly necessary |
| authjs.csrf-token | Protects sign-in and forms against forged requests | Session | Strictly necessary |
| authjs.callback-url | Remembers the page to return to after signing in | Session | Strictly necessary |
Strictly necessary cookies do not need consent under the EU ePrivacy rules, and they cannot be switched off without breaking sign-in.
Local storage
These settings stay on your device and are never sent to our servers:
| Key | Purpose |
|---|---|
| theme | Your day or night mode choice |
| ebooks-cart | The books in your cart |
| reader-prefs | Reading tone, background scene and read mode |
| reader-notes:*, reader-marks:*, pdf-notes:*, pdf-marks:* | Your pen marks and bookmarks in each book |
Because they are functional settings you asked for, they are not tracking. Clearing your browser data removes them (your pen marks and bookmarks will be lost).
Consent and control
We use Google Analytics to count visits and learn which pages are useful, with Google's Consent Mode. The Google tag is on every page, but until you press "Accept analytics" in the banner it may not set or read any cookie: it can only send Google cookieless signals (for example that a page was viewed), with your IP address shortened, which Google uses in aggregate and cannot tie to you. If you accept, Google Analytics also sets the cookies _ga and _ga_* (up to 2 years) and sends usage data to Google (Google Ireland Ltd / Google LLC), which may process it outside your country.
You can change your mind at any time: . Choosing "Only necessary" removes the analytics cookies. We use no advertising or social-media tracking.
Third parties
Apart from Google Analytics after your consent, we do not embed third-party scripts, advertising or social-media widgets. The share buttons on book pages are plain links that only open the other site when you click them. Fonts are served from our own domain. Questions: [email protected].