What we use
If you only browse, we set no cookies at all. If you sign in, these are set. They are strictly necessary for the account to work, so the law does not ask us to get your consent first.
authjs.session-tokenKeeps you signed in.
Kept for: 30 days, or until you sign out
authjs.csrf-tokenProtects the sign-in form from forged requests.
Kept for: until you close your browser
authjs.callback-urlRemembers which page to return you to after signing in.
Kept for: until you close your browser
authjs.state, authjs.pkce.code_verifier, authjs.nonceKeep the sign-in with Google, LinkedIn or Apple secure.
Kept for: about 15 minutes
Our own staff also have a separate sign-in cookie, dp_admin, for the admin area. It is only ever set for staff.
What we do not use
No analytics cookies, no advertising cookies and no social media tracking.
The share buttons are plain links, so nothing from those networks loads until you click one. Fonts are served from our own server.
Pictures from other sites
Some listing pictures load from the organiser’s or the event platform’s server. Those servers could try to set their own cookies. We do not control them, and most browsers block such cookies by default.
Your choices
You can delete or block cookies in your browser settings. The directory works without them. Only signing in needs them.
If we ever add cookies that are not strictly necessary, we will ask first and update this page.
Questions: [email protected].