Cookies
Under the ePrivacy rules, cookies that are strictly necessary to deliver a service you asked for do not need consent; anything else does. Everything below is in the first group, which is why the banner has no "reject" that would break the site — there is nothing optional to reject yet.
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
| wp_session | Keeps you signed in. Holds a random identifier — no personal data. | Strictly necessary | 14 days |
| wp_flash | Carries a one-line confirmation message across a redirect. | Strictly necessary | 60 seconds |
| wp_consent | Remembers your answer to the banner so it stops asking. | Strictly necessary | 180 days |
| wp_pending | Only when you set up a monitor before signing up: holds it until you have an account. | Strictly necessary | 6 hours |
| wp_oauth | Only during Google sign-in: ties the redirect back to your browser. | Strictly necessary | 15 minutes |
| wp_totp | Only between password and two-factor code. | Strictly necessary | 10 minutes |
| wp_device | Set when you sign in. Lets this browser keep signing in to your account while sign-ins from other browsers are paused after many wrong passwords. It holds nothing about you, only a signed mark. | Strictly necessary | 1 year |
Forms also carry a hidden security token that stops other websites submitting them as you. It lives in the page and in your session on our side, not in a cookie of its own.
No third-party cookies
There are none, because there is no third-party content: no embedded fonts, no CDN, no analytics, no social buttons, no ads. Choosing "Allow all" on the banner therefore currently enables nothing extra — it records a preference for the day analytics might be added, and until then it changes nothing.
Changing your mind
Delete the wp_consent cookie in your browser and the banner comes back. Clearing all cookies for this site also signs you out, which is the intended effect.