DeFi Research Data Services sets two cookies that the service needs, uses
your browser’s local storage for a few conveniences, and, only if you allow
it, sets Google Analytics cookies to see how the site is used. A banner asks
about analytics once; until you answer, and if you say no, no analytics cookie
is set. [REVIEW: confirm the strictly-necessary exemption holds in every
jurisdiction served.]
Cookies
| Name | Purpose | Lifetime |
|---|---|---|
_dfrds_session |
Keeps you signed in between requests, carries the CSRF token that protects forms, and holds one-time messages such as “saved”. Encrypted; readable only by the server. | Until you close the browser, or 12 hours of inactivity |
remember_user_token |
Set only when you tick “Remember me” at sign-in. Lets the next visit skip the password. | 2 weeks |
Both are first-party, marked HttpOnly and, over HTTPS, Secure. Neither
is used for analytics or advertising, and no third party can read them.
Analytics cookies, only if you allow them
We use Google Analytics 4 to count visits and see which pages are read. The
banner’s Allow sets these first-party cookies; No thanks sets none.
| Name | Purpose | Lifetime |
|---|---|---|
_ga |
Tells one visitor’s browser from another’s, so visits are not counted twice. | 2 years |
_ga_<ID> |
Keeps the state of the current visit for our Google Analytics property. | 2 years |
Before you answer, and after a no, the page still tells Google Analytics that
it was viewed, without any cookie or identifier (Google’s consent mode), so
we can count visits without recognising anyone. We do not use this data for
advertising: the advertising consent types stay off whatever you choose.
Google processes it as our sub-processor
(sub-processors).
Stripe sets its own cookies on its checkout and billing-portal pages, which are
on Stripe’s domain; those are covered by
Stripe’s cookie policy.
Browser storage
Some pages remember a preference in localStorage, which lives only in your
browser and is never sent to us: a collapsed sidebar, the last chart range you
chose, the tab you had open. Your answer to the analytics banner is kept the
same way, as nv-analytics-consent (granted or denied). Clearing site
data removes them all, and the banner asks again.
Turning them off
Blocking the session cookie makes it impossible to sign in; the public pages
still work. Leave “Remember me” unticked and no remember-me cookie is set.
To change your analytics answer, use Cookie settings at the foot of any
page: it forgets your answer and shows the banner again. A no stops new
analytics cookies; your browser’s settings remove any already set.