Cookies & storage
Small files.
Specific purposes.
How the preview uses browser storage and how to control it.
This notice explains current behavior. It is not a request for consent to optional tracking, and continuing to browse is not treated as that consent.
The application cookie inventory.
__Host-praxis-session
Created after a successful authorized login. Links the browser to a server-side authenticated session. Maximum age: eight hours. Secure, HttpOnly, SameSite=Strict, with the root path.
__Host-praxis-csrf
Created with authorized login to support request-integrity checks for state-changing operations. Maximum age: eight hours. Secure, HttpOnly, SameSite=Strict, with the root path.
Authentication and security.
These application cookies support the restricted operations area. They are not advertising identifiers. Secure limits transmission to HTTPS; HttpOnly prevents access through ordinary page JavaScript; SameSite=Strict restricts cross-site delivery. Logging out removes the application cookies and invalidates the server-side session.
Cloudflare and the website edge.
Cloudflare sits between the browser and the host for delivery and security. Depending on the security features and challenges encountered, it may set its own cookies, such as a challenge-clearance cookie. Those cookies and their lifetimes are controlled by the enabled provider features rather than the application login settings. Cloudflare also receives request and connection metadata.
The application code does not implement advertising cookies or an optional analytics library. Edge-managed measurement is a separate configuration concern. Nonessential tracking must not be treated as necessary simply because it is supplied by an infrastructure provider; any future optional tracking needs appropriate information and consent where required.
Public demo and local storage.
The public workspace uses illustrative records in page memory. The application does not persist those demo edits in localStorage or sessionStorage. The current view may be reflected in the URL. Browser caches and ordinary network requests still exist; an in-memory demo does not mean the browser or infrastructure handles no information.
Your choices.
You can inspect, remove, or block cookies through your browser settings. Blocking authentication cookies prevents the restricted operations login from working. Blocking security cookies can trigger repeated challenges or prevent access. Removing a browser cookie does not erase server-side records.
There is no optional-cookie preference panel in this preview. Do not interpret that as consent to advertising or analytics. Contact the operator if you see an unexpected cookie or want a current explanation of the website’s storage behavior.
Reference sources
A direct conversation
Found something unexpected?
Send the cookie name and page where it appeared. Do not include the cookie value.