Cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
fd_session | Keeps you signed in. HTTP-only, so page scripts can’t read it. | 30 days |
fd_oauth | Protects the Google/Microsoft sign-in handshake against forgery. Only exists while you’re signing in. | 10 minutes |
fd_notice | Remembers that you’ve seen the cookie notice so we don’t show it again. | 12 months |
Because these cookies are strictly necessary to provide the service you asked for, they don’t need your consent under the ePrivacy rules, and there’s nothing optional to switch off.
Other storage
We don’t use local storage or third-party scripts for tracking. When you sign in, Google or Microsoft set their own cookies on their own domains under their own policies.
Email tracking
Digest emails may include a one-pixel image that records when the email was first opened. It isn’t a cookie, and you can disable it under Settings → Email → “Track email opens”.
Managing cookies
You can delete or block cookies in your browser settings, but blocking fd_session will prevent you from staying signed in. See our Privacy Policy for how we handle personal information more broadly.