Cookies
This page lists the cookies this site sets. It was last updated on 6 November 2026, and it matches the software that is running.
Reading a public page does not set a cookie. A cookie is set only when you open a form (such as sign-in) or when you are signed in.
All of the cookies below are strictly necessary for security or for a sign-in you asked for. Under PECR that exception does not need a consent banner. There are no analytics cookies and no advertising cookies. The site does not embed third-party players or timelines.
On this deployment the cookies are marked Secure; HttpOnly; SameSite=Lax. They are host-only (no Domain attribute) and are not readable by page scripts, because they are HttpOnly.
| Name | Why | How long |
|---|---|---|
wt_csrf |
Stops another website submitting a form while you are here. | 14 days |
wt_session |
Keeps you signed in so you can open private notes you are allowed to read. | 14 days |
wt_admin |
Keeps an admin signed in. Separate from a friend sign-in. | 12 hours |
wt_oauth |
Ties the return from Google to the sign-in that just started. | 10 minutes |
What we do not set
No analytics, no advertising tags, and no embedded players that would set their own cookies. If a content-delivery network is later put in front of the site, this page will be updated before that change. It is not in front of the site now.
How to refuse them
You can block cookies in your browser. Public notes still load. Sign-in and the admin area will not work without the cookies above, because they are the sign-in.