Cookies and browser storage
Last updated
Effective [COOKIES EFFECTIVE DATE]
This page lists everything urakimon.com and the account pages can store in your browser or run in it. None of it is used for advertising or to follow you to other websites, and nothing here is shared with advertisers.
1. Set by URAKIMON
| Name | Set by | Purpose | Lifetime | Kind |
|---|---|---|---|---|
__Host-urakimon.session_token | URAKIMON, on the account pages only (api.urakimon.com) | Keeps you signed in to your account. It is HttpOnly, Secure and sent only to the account host, never to the website. | 24 hours, fixed | Strictly necessary |
ura-theme (local storage, not a cookie) | URAKIMON, on the website | Remembers the light or dark theme you chose. It stays in your browser and is never sent anywhere. | Until you clear it | Appearance you chose |
2. Set by Cloudflare
Cloudflare carries all traffic to the website and the API and protects it from attacks. It can set the cookies below on our domain. Which of them your browser gets depends on which of Cloudflare's security checks a visit meets; many visits get none.
| Name | Purpose | Lifetime | Kind |
|---|---|---|---|
cf_clearance | Records that your browser passed one of Cloudflare's security checks, so it is not checked again on every page. | The pass time Cloudflare applies (30 minutes by default) | Strictly necessary (security) |
__cf_bm | Helps Cloudflare tell people from automated traffic. | 30 minutes | Strictly necessary (security) |
_cfuvid | Lets Cloudflare's rate limits tell apart visitors who share one IP address. | Until you close the browser | Strictly necessary (security) |
cf_chl_… | Holds the state of a Cloudflare check while it runs. | Until the check ends | Strictly necessary (security) |
3. Scripts that run in your browser
Apart from our own scripts (served from urakimon.com, with no tracking), these can run on our pages:
| What | Where | Purpose | Stores on your device |
|---|---|---|---|
Cloudflare's security script (/cdn-cgi/challenge-platform/…) | Every page. Cloudflare adds it on the way to your browser. | Runs Cloudflare's checks for automated traffic in your browser. | Its result, in cf_clearance |
Cloudflare Turnstile (challenges.cloudflare.com) | Only the sign-in, sign-up and password-reset forms | Checks that the person filling in the form is a person, from signals of your browser and device. | Only inside its own frame, for the check |
We do not use web analytics or any other visitor statistics. If we ever switch on Cloudflare Web Analytics, we will update this page before it runs.
4. Why there is no consent banner
The law requires consent before storing or reading information on your device, except where that is strictly necessary for a service you asked for. In the United Kingdom there are also exceptions for security and for the appearance of a site, as long as you are told and can object.
- The session cookie is needed to keep you signed in, which you asked for.
- Cloudflare's cookies, security script and Turnstile protect the service and your account from attacks and automated abuse, which regulators treat as strictly necessary.
- The theme is stored only when you choose one. To object, choose the other theme or clear this site's storage in your browser.
We use nothing else. If we ever add something that needs your consent, we will ask for it first.
5. Controlling cookies
Your browser's settings let you see, block and delete cookies and site storage. If you block our session cookie you cannot sign in. If you block Cloudflare's cookies, a page may show a check again or refuse to load.
6. Questions
Write to [PRIVACY EMAIL]. The privacy notice explains what else we store and why.
7. Changes to this page
When this page changes, we post the new version here at least 30 days before it applies, and the effective date at the top changes with it. A change that the law, a court or an authority requires can apply sooner, from when we post it.