One cookie, for signing in

This site sets one cookie of its own, and only once you sign in. There is no analytics, no advertising and nothing that follows you to other sites — which is also why there is no banner asking you to accept anything.

The cookie this site sets

Name: __Host-sessione
What it is for: Keeping you signed in
How long: 30 days, or until you sign out
What is in it: A random number, nothing else

It contains no name, no email address and nothing readable: just a random value that means nothing on its own. The matching record lives in the database, and even there only as a hash — so a copy of the database cannot be used to forge the cookie and step into your session.

It is set only when you sign in. Browsing the site without an account sets no cookie at all.

Three technical attributes, because they are the reason it is reasonably safe: HttpOnly means no script can read it; Secure means it only travels over HTTPS; SameSite=Lax means another site cannot make your browser send it along with a request it made up.

The language you chose

Not a cookie, but worth listing here because it is stored in your browser too. When you pick a language from the selector, that choice is kept in local storage under prl.lingua — nine characters, on your device, never sent anywhere except back to this site as “show me this language”. Without it the site would guess your language from your IP address on every page, and override your choice each time.

On the sign-up and reset forms

Those two pages carry Cloudflare Turnstile, the check that tells a person from a script. Without it, a few thousand fake accounts a night would be trivial to create, and the confirmation emails they generated would get this domain blacklisted — which would break the reset link for real players too.

Turnstile may set technical cookies of its own on those two pages, under Cloudflare’s domain. They are not ours: this site cannot read them and does not receive them. Cloudflare states they exist to detect bots and not to identify or profile anybody. The other pages of this site do not load Turnstile at all.

What there is not

No Google Analytics or any other analytics. No advertising or retargeting pixels. No social network buttons. No cookie that reports what you read, how long you stayed, or where you went next. Nobody is paying for that data here, so there is no reason to collect it.

The link that sends three euros is a plain link, not an embedded PayPal button. The difference is the one that matters here: a button would load PayPal’s code into this page and could set cookies while you were only reading, whereas a link does nothing at all until you click it, and then it is PayPal’s page you are on, under their own rules.

Why there is no banner

European rules require asking for consent before storing anything that is not necessary to provide what you asked for. A cookie that keeps you signed in is necessary to being signed in; a stored language choice is necessary to showing the language you picked. Neither is a tracker, so there is nothing to ask permission for — and a banner that asked anyway, over one session cookie, would be theatre.

If this site ever gains something that does need consent, the banner appears then and this page says so. That is the honest order of events, rather than asking for blanket consent now in case it becomes useful later.

Refusing it anyway

Your browser can block cookies for this site, or delete them; both work and neither breaks anything. The only consequence is that signing in stops working — the cookie is what remembers it — so you would be able to read the site but not reach your profile. Blocking local storage only loses the language choice: the site falls back to guessing from your IP address.

Last updated: 15 August 2026.