Cookie Policy

We use strictly necessary cookies for sessions, authentication, CSRF protection, language preference, and temporary access to password-protected QR codes.

We do not use advertising cookies in the MVP. Session cookies are HttpOnly, SameSite=Lax, and, in production, sent only over HTTPS.

Blocking necessary cookies may prevent login, forms, and protected features from working.