Cookies

what we store, and why

Short version: two cookies that keep you signed in, one localStorage flag for your analytics preference, and a page-view counter that uses neither. No ad trackers, no third parties, nothing sold.

Cookies

wbd_session — keeps you logged in
Set when you join or click a login link. httpOnly (JavaScript can't read it), lasts 30 days, deleted when you log out. Without it there's no way to know which member is browsing.
wbd_admin — back office only
Set only if you sign in at /admin. Lasts 7 days. Regular visitors never get it.

Browser storage (not cookies)

wbd_nt — analytics opt-out
A flag in localStorage when you hit "don't count my visits". Never leaves your browser.

Analytics without cookies

We count page views ourselves: the path you visited, the referring site's domain, and a timestamp. No cookie, no IP stored, no fingerprint, nothing sent to a third party. Visits are skipped entirely if your browser sends Do Not Track or you've opted out.

Your data

Your email is used only for login links, verification, and a one-time nudge if you go quiet after joining. It's never shown publicly. When you message another member, they receive it by email with your address as the reply-to, so they can answer you directly — the message itself isn't stored. To remove everything, delete your profile or ask — it goes, along with your posts.