Cookies & browser storage

Essential form protection

mo-csrf is a first-party cookie used to reject forged form submissions. It contains a random token, not your identity, and lasts up to 30 days.

Optional account sessions

mo-session is created only after you sign in. It is signed, HttpOnly, Secure in production, SameSite Lax, and expires after 30 days. It contains your account ID, email, display name, and expiration time.

Preferences on this device

mo-theme stores the light or dark theme in localStorage. mo-saved-v1 stores up to 100 saved record titles, slugs, links, and save times in localStorage. These preferences stay in this browser and are not synchronized to the server.

Language

The launch edition is English-only. If reviewed translations are introduced later, a first-party lang cookie may remember an explicit language choice for up to one year.

Analytics

Google Analytics 4 counts page views and general usage so we can see which records are read. It sets first-party cookies named _ga and _ga_<ID> that last up to two years and contain a random identifier, not your name or email. Google processes this data under its own privacy policy. Advertising storage is switched off in the tag, and the data is not used for advertising.

You can block these cookies in your browser settings or with Google's opt-out browser add-on without losing access to anything on the site.

Advertising

This site runs no advertising. If third-party advertising is enabled later, a consent surface and vendor-specific disclosures must appear before nonessential storage is used.

Your controls

You can clear saved items on the Saved page, sign out to delete the session cookie, or remove site data through your browser settings. Blocking the CSRF cookie prevents forms from being submitted safely.