Cookies
We only store what the site needs to work. No tracking, advertising or analytics cookies.
Last updated: October 20, 2026
What we store on your device
On HTTPS, cookie names carry a __Secure- or __Host- prefix. If you never sign in and never switch the theme, Happylancing Directory stores nothing on your device.
| Name | Type | Set | Expires | Purpose |
|---|---|---|---|---|
authjs.session-token | Cookie | After you sign in | 30 days, or until you sign out | Keeps you signed in. Contains an encrypted session token. |
authjs.csrf-token | Cookie | On the sign-in page | Browser session | Protects sign-in and sign-out requests against cross-site request forgery. |
authjs.callback-url | Cookie | On the sign-in page | Browser session | Returns you to the page you came from after signing in. |
authjs.state, authjs.pkce.code_verifier | Cookie | During GitHub sign-in | 15 minutes | Verifies that the response from GitHub belongs to the sign-in you started. |
theme | Local storage | When you pick light or dark mode | Until you clear site data | Remembers the theme you chose. Without it, the site follows your system setting. |
Why there is no cookie banner
All of the above are strictly necessary to provide a service you explicitly asked for (signing in, or keeping your theme). Under § 25 (2) No. 2 TDDDG and Art. 5 (3) of the EU ePrivacy Directive, they do not require consent. They are first-party only, and none of them is used for tracking, advertising or cross-site profiling.
Our visitor statistics (Vercel Web Analytics) set no cookies and read nothing from your device. Sponsored placements and affiliate links are counted on our server in aggregate and set no cookies either. Fonts are served from our own domain.
Third-party websites
When you follow a link to GitHub, a project homepage, a sponsor or an affiliate partner, that website may set its own cookies under its own policy. We have no control over them.
Managing cookies
You can delete or block cookies in your browser settings. If you block the sign-in cookies you can still browse everything, but you cannot sign in. More about how we handle personal data is in the privacy policy.