Cookies
Last updated 5 September 2026
Three cookies, all of them for signing in. No advertising, and nothing that follows you to another site. Page views are counted, but that is done without a cookie, so if you never sign in this site still sets no cookies at all.
The cookies
All three are set by the sign-in library this site uses, and all three are HttpOnly, which means the page cannot read them and neither can a script running on it. They are marked SameSite=Lax, so they are not sent when another site links into this one in a way that could act on your behalf.
| Name | What it is for | How long it lasts |
|---|---|---|
authjs.session-token | Keeps you signed in, so every page knows which account it is showing. | 30 days |
authjs.csrf-token | Stops a sign-in being submitted from another site on your behalf. | Until you close the browser |
authjs.callback-url | Remembers which page to return you to after signing in. | Until you close the browser |
None of these exist before you sign in. Reading the landing page, the public review pages, or anything else while signed out sets nothing.
Storage that is not a cookie
Two things are kept in your browser rather than sent to the server. Neither leaves your device and neither is readable by anyone else.
- Your slide settings. The style, colours, what is included, how songs are paged. This is the optional one, and the banner asks about it. Decline and the settings reset each time you open the export screen.
- Your answer to that banner. One value saying what you chose. It has to be kept in order to honour it, which is why declining cannot switch it off.
Changing your mind
Clearing site data for this domain in your browser removes everything above, including your answer to the banner, which then appears again. Signing out removes the sign-in cookies immediately.
Other people's servers
Album artwork mostly reaches you through this site, which means the service hosting the image sees a request from our server and not from you. Some covers are still loaded straight from where they live, currently i.discogs.com and cdn-images.dzcdn.net. Those requests carry your IP address and browser version to those hosts, the way any image on any page does. They do not set cookies here.
If you sign in with Google, Google knows you signed in. That is described in the privacy notice.