Cookie	Category	Purpose	Duration
Session cookie (httpOnly)	Strictly necessary	Keeps you signed in. Cannot be read by JavaScript.	Session, or until you sign out
CSRF token	Strictly necessary	Protects forms and account actions against cross-site request forgery.	Session
NEXT_LOCALE	Strictly necessary	Remembers which language you're viewing the site in. Recognized as an exempt, delivery-of-service cookie under EU guidance (e.g. CNIL), since it stores nothing beyond the language you selected.	1 year
bw_consent	Strictly necessary	Stores your cookie preferences themselves, so we don't ask again every visit.	1 year
blamewell_session	Strictly necessary	A readable marker that a sign-in exists, so the site does not ask the server about signed-out visitors. It contains no personal data and no credentials (English text).	Same as your sign-in (7+ days) or until you sign out

We do not currently set any analytics or marketing cookies. If that changes, this table will be updated first, and any new cookie will only load after you've turned on the relevant category in Cookie Preferences.