Cookies
In force from 10 September 2026.
There is no cookie banner on this site, and that is not an oversight. Consent is needed for cookies that track you; it is not needed for the ones without which a site cannot work. Every cookie here is the second kind, so there is nothing to ask you about — and nothing to opt out of except by signing out.
What is set
| Name | What it does | How long |
|---|---|---|
| darts_session | Remembers that you are signed in, and carries one-off messages like “Password changed”. Signed with a secret key so its contents cannot be edited or forged. | 30 days |
| remember_token | Only if you tick Stay signed in on this device. Lets you come back without typing a password again. Deleted the moment you sign out. | 30 days |
| csrf_token | Proves a form was submitted from this site and not from another site pretending to be you. Part of the session cookie. | With the session |
| __cf_bm and similar | Set by Cloudflare, which sits in front of this server, to tell browsers from bots. Not set by this application and not readable by it. | Cloudflare's own, typically 30 minutes |
All of this site's own cookies are HttpOnly (JavaScript cannot read them), SameSite=Lax (they are not sent when another site links into this one) and Secure over HTTPS.
Not cookies, but worth saying
The scoreboard keeps a couple of preferences in your browser's local storage rather than in a cookie — whether the voice caller is switched on, which voice it uses and how fast it speaks. That never leaves your device and is never sent to the server. Clearing your browser data clears it.
What is not here
No analytics cookies. No advertising cookies. No social media pixels. No third-party scripts of any kind: the site's content security policy blocks the browser from loading anything that is not served by this server, so even an accident could not introduce one quietly.
More detail on everything else in the privacy page.