Chronik.io
Sign in

Cookie policy

Chronik.io uses no tracking cookies and no analytics cookies, and shows no cookie banner. This page is short because there is little to say, and it exists so that the absence is stated rather than merely implied.

The only cookies there are

None of them is read by anyone but this site, and none of them follows you to another one.

Set on every visit, because the site cannot work without them

  • Session cookie — keeps you signed in between requests. How long: Until you sign out or the session expires.
  • CSRF token — protects forms against cross-site request forgery. How long: For the session.

Set only after you do something that asks for it

  • Remembered sign-in — only if you asked to stay signed in. How long: Until it expires or you sign out.
  • Sign-in duration — only if you changed how long you stay signed in. It carries that choice per device, because the session's clock is set before we know who you are. How long: Five years, or until you set it back to the default.
  • Language choice — only if you picked a language yourself. Keeps the site in that language on your next visit instead of guessing again from your browser. How long: One year, or until you choose another.
  • Shared changelog access — only if you entered the passphrase for a changelog somebody shared with you. One cookie per changelog, so unlocking one never unlocks another. How long: Thirty days.

The four in the second group do not exist until you act, so a first visit sets only the two above them. The language and duration cookies hold a plain short value — a two-letter language code, a number of minutes — and both are checked against a fixed list of allowed values when written and again when read. The changelog cookie is encrypted and bound to this installation, so it cannot be read or moved to another one.

All of them are strictly necessary to provide a service you asked for, so § 25 (2) TDDDG applies and no consent is required. Refusing them means the service cannot sign you in, cannot keep the language or the sign-in duration you chose, and cannot remember that you already entered a changelog passphrase.

Why there is nothing else

Page views are measured server-side, on our own Matomo instance, from the request that already happened. No analytics script runs in your browser and nothing is stored on your device. The privacy policy explains that in context, along with everything else Chronik.io does with personal data.