Cookie policy

Name	Purpose	Type	Duration
`sp_session`	Keeps you logged in securely. It contains a random token, and cannot be read by scripts on the page (HttpOnly).	Strictly necessary	90 days, renewed while you use the site; deleted when you log out
`sp_li`	A simple “logged in” flag (value 1) so pages can show the right menu. It contains no personal data.	Strictly necessary	Same as the session
`sp_rf`	A technical marker (value 1, no personal data, HttpOnly) that limits how often your login cookies are renewed to once a day.	Strictly necessary	24 hours; deleted when you log out
`sp_lang`	Remembers your language. It is set when you choose a language at the bottom of a page or open a link to our pages in a given language, as our iPhone app does with the pages it opens. It contains only the language code (for example “de”), no personal data.	Strictly necessary	365 days from the last time it was set
`sp_app`	Only in our apps: tells our pages that they are shown in the app (value “android”, or “ios” on the pages our iPhone app opens; no personal data). Kept in the browser’s session storage, not in a cookie, so it is never sent with your requests. Our pages only add “in the app” to a sign-up or to a step on the membership page, for our statistics (privacy policy, section 3).	Strictly necessary (session storage, app only)	Until the app is closed
`sp_adult`	Only in our Android app: records that you confirmed you are 18 or over when you first opened the app, so that we do not ask again (no personal data). Kept in the browser’s local storage, not in a cookie.	Strictly necessary (local storage, app only)	Until you clear the app’s storage
`sp_play_pending`	Only in our Android app, when you pay for a plan through Google Play: a random reference for the purchase in progress, so that it is still linked to your account if the app closes during the purchase (no personal data). Kept in the browser’s local storage, not in a cookie.	Strictly necessary (local storage, app only)	Until our server has the purchase, or until you clear the app’s storage
`sp_play_sync`	Only in our Android app, where it offers Google Play payments: when the app last checked your Google Play purchases, so that it does not check them on every page (a time, no personal data). Kept in the browser’s local storage, not in a cookie.	Strictly necessary (local storage, app only)	Until you clear the app’s storage

Strictly necessary cookies and storage do not need consent under EU and UK rules (ePrivacy Directive Art. 5(3)). If we ever add analytics or any other non-essential cookies, we will ask for your consent first and update this page.

When you pay or verify your age, you are taken to our payment or verification provider, whose own pages may set their own cookies under their policies. You can delete cookies at any time in your browser settings; you will then be logged out.