Cookie Policy
Last updated: 1 August 2026
RefStamp uses a minimal set of strictly-necessary cookies. We do not use analytics, advertising, or cross-site tracking cookies, so no consent banner is required to browse or use the service. This policy explains what we set and why.
| Cookie / storage | Purpose | Type | Duration |
|---|---|---|---|
st_session |
Keeps you signed in (encrypted session token, httpOnly) | Strictly necessary | ~7 days |
st_csrf |
Protects against cross-site request forgery | Strictly necessary | ~7 days |
Session token (browser sessionStorage) |
Maintains your session in the web app tab | Strictly necessary | Until the tab closes |
Managing cookies
You can block or delete cookies in your browser settings, but the service will not function correctly without the strictly-necessary cookies above — for example, you will not be able to stay signed in. If we ever introduce non-essential cookies, we will ask for your consent first and record it.