A cookie is a small piece of text a website asks your browser to keep. We set cookies only where they are needed for something you asked to do, such as signing in or sending a form. We use no analytics, advertising or tracking cookies anywhere, and no one else sets cookies through our pages. That is also why there is no cookie banner: the law does not ask you to agree to cookies a page cannot work without.
Reading a site, or this website
None. Reading an author’s site, joining it or writing to its author through the contact form sets no cookie. Nor does reading these pages, the guides or the help.
The one exception here is the form for reporting a site, which sets the two cookies below to protect it from forged submissions.
Signed in as an Author
- draft-margin-session keeps you signed in. It expires after 2 hours without activity.
- XSRF-TOKEN proves that a form you send came from our page, not someone else’s. It expires with the first.
- remember_web_…, only if you tick Remember me, keeps you signed in on that browser for up to 400 days, until you sign out.
Signed in as a Member of a site
Pressing the sign-in link in your email signs you in to that one site, which then sets:
- member_session keeps you signed in to that site only, and expires after 2 hours without activity;
- remember_member_… keeps you signed in to it for up to 400 days, so one link lasts. Signing out removes it;
- XSRF-TOKEN, set as you sign out, proves the sign-out came from the site.
Kept in your browser, not sent to us
If you change the text size or colours in a chapter’s reading settings, your browser keeps the choice under reader-settings, in its local storage. It never leaves your device; clear it in your browser’s settings.
Cloudflare Turnstile
The signup form and authors’ contact forms run Cloudflare’s Turnstile check, which tells people from bots by looking at your browser. Cloudflare describes what it collects in its own privacy policy; we use the result only to accept or turn down the form.
Turning cookies off
Your browser can block or delete cookies whenever you like. Sites read just as well without them; only signing in, and the report form, need them.
Who runs it
Draft Margin is run by The operator, Postal address to be set, the operator’s country. Write to [email protected] about anything on this page.