Cookie Policy

Essential cookies

Set when you sign in; they cannot be switched off without breaking sign-in.

• better-auth.session_token — your session (30 days, refreshed daily).
• better-auth.session_data — a short cache of session data (5 minutes) so pages load without a database round-trip.
• better-auth.two_factor — a 10-minute marker while you complete a two-factor sign-in.
• better-auth.trust_device — set only if you tick “Trust this device” (30 days).
• better-auth.last_used_login_method — remembers whether you last used a password, passkey or provider so the sign-in page can hint (30 days).
• OAuth state cookies for a few minutes while you sign in with Google, ORCID or your institution.

Browser storage

Preferences such as dark mode, the collapsed sidebar, editor panel choices and dismissed banners are kept in your browser's local or session storage. They never leave your device.

Third parties

Pages embed no third-party scripts. Fonts, icons and libraries are served from this site. Bibliographic sources are queried from our servers, not from your browser.

Controlling cookies

Your browser lets you delete or block cookies; blocking the essential ones prevents signing in. Signing out removes session cookies immediately.