Cookies and local storage

Relocat uses cookies only for session authentication on the professional surfaces (admin, moderator, partner, KG editor). The community web app at /app/ does not set any cookies and does not write to localStorage, sessionStorage, or IndexedDB.

Strictly-necessary cookies

The Django session cookie (sessionid) and CSRF cookie (csrftoken) are set when you sign in to a professional surface. They are scoped and marked Secure; the session cookie is additionally HttpOnly. Both are cleared on sign-out. These are strictly necessary within the meaning of §25(2) TDDDG and Art. 5(3) of the ePrivacy Directive, which is why no consent banner is shown — nothing else is set.

Theme preference (relocat.org only)

The public pages on relocat.org remember your light / dark theme choice in a single localStorage entry named relocat-theme. This is a strictly-necessary user-preference value — no consent banner is required, no third party reads it, and it is never transmitted to the server. Clear your browser’s local storage for relocat.org to reset the preference.

Guest sharing page

The guest file-sharing page (/g/) sets no cookies and writes nothing to localStorage, sessionStorage, or IndexedDB. Decryption of a shared file happens in memory only.

No analytics or tracking

Relocat does not set tracking, analytics, advertising, or fingerprinting cookies of any kind. No third-party scripts are loaded on these pages.

Last updated: 2 July 2026