AshigrainCookie Notice
One cookie, only when you sign in
The Ashigrain website sets one cookie, and only when you sign in. It uses no advertising or tracking cookies, and its visitor statistics work without cookies. There is no cookie consent banner.
| Cookie | Set when | Purpose | Lifetime |
|---|---|---|---|
__Host-ag_session |
You sign in to your Ashigrain account | Keeps you signed in. It holds a random session token, is sent only to ashigrain.com over HTTPS and cannot be read by scripts on the page. It is not used for tracking | 30 days after sign-in, or until you sign out, reset your password or delete your account |
This cookie is necessary for your account to work. Under the ePrivacy rules, implemented in Estonia through the Electronic Communications Act, it does not require consent. You can browse the site with the cookie blocked, but signing in requires it.
Your language choice
When you pick a language in the website’s language menu, your browser keeps that choice in its local storage under the key ashigrain.language, so the site opens in your language on your next visit. Nothing is stored until you pick a language, the value is only the language code, and the stored value is not sent to us. If you are signed in, the language you pick also becomes the language of your account emails. Choosing the automatic option removes it, as does clearing the site data in your browser. Because it only remembers a setting you asked for, it does not require consent. Without it, the site still works and opens in English or your browser’s language.
Visitor statistics
On its public pages, the website counts visits with Umami, an analytics tool that we run on our own server at stats.ashigrain.com. Umami sets no cookies, stores nothing in your browser and does not follow you across other websites. It is not loaded on the account pages (including sign-in and registration), the activation and purchase confirmation pages, or the “page not found” page. What it records and how long we keep it is described in the Privacy Policy.
Other places
- Downloads: download links carry a short-lived signed token in the address and set no cookies.
- Checkout: payment takes place on Stripe’s checkout page, operated by Stripe and Link. Stripe sets the cookies it needs there for payment and fraud prevention, under its own cookie policy.
- Network protection: Cloudflare protects our server. If Cloudflare suspects automated abuse, it may set a strictly necessary security cookie (such as
__cf_bmorcf_clearance) to tell real visitors from bots. These are not used for tracking or advertising.
Changes
If we introduce cookies or browser storage that require consent, we will ask for it before setting them and update this notice. For details of how we handle personal data, see the Privacy Policy.