Current storage inventory
| Name | Purpose | Party | Duration |
|---|---|---|---|
__Host-me-curation | Authenticates an explicitly authorized curator. HttpOnly, Secure, host-only, SameSite=Strict. Not accessible to JavaScript. | First party | Up to one hour, or until sign-out. No automatic renewal. |
The curation sign-in flow does not store email codes or session tokens in localStorage or sessionStorage. Browsing the catalog does not set this cookie.
Analytics and advertising
No analytics package, advertising pixel, affiliate-network script, chat widget, or marketing tag is installed. Because there is no non-essential browser storage or tracking script to opt into, the site does not show a cookie banner. Adding a banner anyway would create a choice about technology that is not present.
Server-side records are different
The site uses short-lived, hashed rate-limit records and server-side application data described in the privacy notice. Those are not cookies and are not stored in your browser.
Hosting infrastructure
The repository does not show the cookies, if any, added outside the application by the production host or its protected administrator sign-in. [[NEEDS INPUT: confirm with OpenAI Sites and Cloudflare whether public requests receive any infrastructure cookie, its name, purpose, and duration]]. If that inventory changes, this page and the consent decision must be updated before non-essential technology is enabled.