What a cookie is
A cookie is a small text record your browser stores for a website and sends back on later requests. It is how a site remembers that you are signed in from one page to the next.
The cookies we set
All three are first-party and strictly necessary, which is why the site does not ask you to consent to them. We do not set cookies for advertising, analytics or tracking across other sites.
- _aura_session — the session cookie. It holds your signed-in state, the language you chose and a security token that protects forms. It is essential and expires when you close your browser.
- remember_user_token — set only when you tick “Remember me” at sign-in, so you stay signed in between browser sessions. It expires after two weeks or when you sign out.
- hotwire_auth — a one-character flag set while you are signed in that lets the page know whether to show signed-in features. It is removed when you sign out.
Third-party resources
Pages load fonts from Google Fonts, a UI library from the jsDelivr CDN and map tiles from OpenStreetMap. As far as we know none of them sets cookies through AURA, but each sees your IP address when your browser fetches the resource. See the privacy policy for details.
The mobile app
The app does not use cookies. It keeps a sign-in token on your phone so you do not have to sign in every time; signing out deletes it.
Controlling cookies
You can delete or block cookies in your browser’s settings. Blocking the session cookie means you cannot sign in, but every public page still works without it.