staging - VCurl

Cookies

Everything staging - VCurl stores in your browser, what it's for, and how long it sticks around.

We use a small number of cookies and similar storage to operate the service. We don't use third-party advertising trackers, cross-site identification cookies, or social-network share pixels. Under UK PECR all of the cookies listed below are strictly necessary, so we don't present a consent banner, but you should know what's there.

Cookies we set

Name Purpose Lifetime
laravel_session Keeps you signed in between requests. Without it the service can't function. 2 hours (refreshed on each request)
XSRF-TOKEN Cross-site request forgery token. Prevents other sites from submitting forms on your behalf. 2 hours (refreshed on each request)
remember_* "Remember me" token when you opt in at sign-in. Lets us sign you back in without a fresh password prompt. 5 years (revoked on sign-out)
vcurl_poll_*
vcurl_availability_*
Set on a public page, with no account needed, when the poll or availability poll you responded to is configured to accept one response per browser. It records only that this browser has already responded, so the page can show you the results instead of the form again. The value is the single character "1" — there is no identifier in it, and one is set per poll rather than per visitor, so it cannot be used to recognise you anywhere else. 1 year

Every cookie above is strictly necessary — each one exists to do something you asked for, so none of them needs a consent banner. The two public-page cookies are the only ones set for someone without an account, and nothing is set at all when a short link simply redirects you.

What we don't use

If we ever add analytics

When we add analytics or marketing pixels we'll present a consent banner before any non-essential cookies are dropped. You'll be able to accept, reject, or pick categories. Your choice will be remembered in a small consent cookie until you change it from the cookies page.

How to clear cookies

Every browser lets you reject or delete cookies for a specific site:

Deleting the cookies above will sign you out and require you to re-authenticate.

For the wider picture, see our privacy policy.