Cookies
This site sets two cookies of its own: one for someone who has entered the private room, one for someone who has chosen a language by hand. Everything else listed below is either set by Cloudflare to serve and protect the site, or set by measurement, which runs only after it has been agreed to.
In force from
01Why there is no banner
A consent banner is required for cookies that are not strictly necessary - advertising, cross-site measurement, personalisation. This site sets none of those, so a banner would ask permission for something that is not happening.
02Everything this site puts on a device
ic_room, a cookie. Set only after a passphrase is accepted at the private room, and it records that the door was opened and nothing else. First-party, signed, HttpOnly, and gone when the browser session ends or after thirty days, whichever is first. Strictly necessary to a service that was explicitly asked for.
ic:sound, in local storage. Set only when the sound control on the home page is pressed, and it holds one word: on, or off. It is read on the home page and nowhere else, it is never sent anywhere, and it identifies nothing. A preference the visitor created by making it.
ic_lang, a cookie. Written only when a language is chosen by hand in the language picker, and it holds one word: the language chosen. The front door reads the browser's language preference to open the site in a language the visitor reads, and this cookie is what makes a hand-made choice outrank that guess from then on. First-party, a year, sent nowhere else.
A Cloudflare cookie for traffic management and attack mitigation, set by the network that serves this site rather than by the site. It carries no advertising identifier and is not used for profiling.
A Cloudflare Turnstile check, on the contact form only, and only while that form is being used. It replaces a CAPTCHA, is there to keep the mailbox from being filled by machines, and does not follow anyone between sites.
ic:list, in local storage. Written when the subscription window is answered - either way - and it holds one word. It exists so the window is shown once and never again, which is the only reason it is there.
That is the whole list. None of these needs permission, which is why nothing on this site asks for any.
03Measurement, when it is switched on
Google Analytics is not on this site today. When it is, it will write two cookies - _ga and _ga_ followed by the property id - which last two years and which are not necessary to anything a visitor came here for. They will therefore be set only after agreement, and never before: the strip at the foot of this page becomes a request rather than a notice, the tag is held in a denied state before it loads, and refusing keeps it from loading at all.
Agreeing means data about the visit reaches Google, which processes it in the United States among other places. Google acts as this site's processor for that measurement, under the European Commission's standard contractual clauses and its own certification under the EU-US Data Privacy Framework. The legal basis is consent, and consent alone.
Refusing is one button, the same size and in the same row as the other, and the answer can be taken back from this page at any time. Nothing else on the site behaves differently either way.
04Why the gate exists before the tag does
The dialog, the denied-by-default state and the withdrawal control are already built and already tested. The usual failure runs the other way round: a tag switched on one afternoon and a banner written the following week, or worse, the tag switched on and the banner forgotten.
05What is not set
No analytics cookie until one is agreed to. Cloudflare Web Analytics is cookieless and runs whatever the answer; the two Google Analytics cookies described above are written only after consent, and never if it is refused or withheld.
No advertising or retargeting cookie, and no social network pixel.
No cookie from a font provider, because the fonts are served from this domain.
No cookie from an embedded video player, because no player is embedded - episode thumbnails are images, and a link to an episode opens YouTube in a new tab under YouTube's own terms.
06Cloudflare
Cloudflare may set a strictly necessary cookie to manage traffic and mitigate attacks against the origin. It carries no advertising identifier and is not used for profiling.