Cookies

This site sets three cookies. All of them are needed to sign you in and keep you signed in, and none of them track you anywhere else.

Last updated 30 July 2026

What Is Set

A session cookie holds the signed token that says you are logged in. Without it every page would ask you to sign in again. It is cleared when you sign out.

A CSRF token is sent with forms so another website cannot make your browser buy a ticket or request a withdrawal on your behalf.

A callback cookie remembers the page you were heading to when you were asked to sign in, so you land back there afterwards.

What Is Not Set

No advertising cookies. No analytics. No pixels, no fingerprinting, no cross-site tracking, and nothing shared with a data broker. This site runs no third-party scripts at all, so no other company receives anything about your visit.

Why You Are Not Asked

Consent is required for cookies that are not strictly necessary. All three of these are: without them you cannot sign in, cannot submit a form safely, and cannot be returned to the page you asked for. There is nothing optional here to accept or decline, so a banner asking you to would be theatre.

That reasoning holds only while the list above stays as it is. If anything third-party is ever added to this site, this page changes and you get asked properly first.

Turning Them Off

Your browser can block or clear these cookies at any time. Because all three are essential, blocking them means you cannot sign in or buy a ticket.

Keeping Them

The session expires on its own after a period of inactivity and when you sign out. Clearing your browser data removes all three immediately. What is stored on our side, rather than in your browser, is set out in the privacy policy.