Cookies and browser storage

What this website stores

Last updated: 13 September 2026.

The public website does not set advertising cookies, analytics cookies, language-preference cookies or local-storage identifiers. Language is selected through the page URL.

The admin uses one first-party authentication cookie:

• Name: obshift_admin.
• Provider: this OBShift website.
• Purpose: maintain an authorised admin session.
• Type: HTTP cookie, marked HttpOnly and SameSite=Lax, with Secure enabled in production.
• Duration: eight hours, or until sign-out removes it.
• Category: strictly necessary for the admin login requested by the user.

Measurement without a visitor cookie

The website records a limited count of button clicks, form starts and successful submissions. These records contain the action, language and time. They do not use a browser identifier or store the form's contact details. Connection information can still reach the server and its hosting logs.

External services

When enabled, Cloudflare Turnstile provides abuse checks on forms. Its browser checks depend on the challenge and Cloudflare configuration. We do not list a Cloudflare clearance cookie as present unless it is actually set on the published site.

A project website is loaded in a preview only when you choose to load external content. It may use its own cookies or storage. Returning to the project image stops that embedded page, but does not remove cookies already set by that external website. Browser settings can remove or block them.

External links to social networks, WhatsApp or other websites open separate services. Their own cookie notices apply there.

Cookie settings

There are no optional analytics or marketing cookie categories to switch on for the current website. A consent banner would not change its behaviour, so we do not ask you to accept cookies it does not use.

You can clear or block cookies through your browser. Removing the admin cookie signs you out. Rejecting browser cookies does not prevent an audit request, application or newsletter signup.

If optional tracking is added, its notice and consent controls must be updated before activation. Read the privacy notice for other data processing.