Legal
Cookie Policy
Last updated: 13 September 2026
Quillfire sets only strictly necessary cookies. They keep you signed in and protect the sign-in form. We use no analytics, advertising, social-media or other tracking cookies. That's why you won't see a cookie banner.
1. What cookies are
Cookies are small text files a website saves in your browser. Similar technologies, such as local storage, work the same way. This policy covers all of them.
2. The cookies we set
| Cookie | Purpose | Duration |
|---|---|---|
| __Secure-next-auth.session-token | Purpose: Keeps you signed in. Contains an encrypted, signed session token. | Duration: 30 days (renewed while you use the app); removed when you sign out |
| __Host-next-auth.csrf-token | Purpose: Protects the sign-in form against cross-site request forgery. | Duration: Session — deleted when you close your browser |
| __Secure-next-auth.callback-url | Purpose: Remembers which page to return you to after signing in. | Duration: Session — deleted when you close your browser |
These are first-party cookies, set only by quillfire.ink. They are marked Secure (sent only over HTTPS), HttpOnly (page scripts can't read them) and SameSite=Lax (not sent on cross-site requests). The public pages, like the home page and these policies, don't set any cookies until you sign in.
3. Why there is no consent banner
Under the UK and EU ePrivacy rules (PECR and the ePrivacy Directive), consent isn't needed for cookies that are strictly necessary to provide a service you asked for. Signing in and protecting the sign-in form qualify. We use no other cookies, so there is nothing to consent to. If we ever add an optional cookie, such as analytics, we'll ask for your consent first and update this page.
4. Third-party cookies
None. Quillfire has no embedded videos, maps, social buttons, chat widgets, analytics or ad scripts. Fonts are served from our own domain, so no other company can set or read cookies through our pages.
5. Controlling cookies
You can block or delete cookies in your browser settings. If you block the cookies above, you won't be able to sign in, because Quillfire can't work without them. Signing out removes the session cookie immediately.
6. Questions
See our Privacy Policy for how we handle personal data, or email privacy@quillfire.ink.