Legal
Cookie policy
Last updated: 24 October 2026
On this page
What we set, and why#
A cookie is a small file a website leaves in your browser. Most of the ones below exist because the site cannot work without them: they keep you signed in, protect the sign-in itself, and remember the choices you make here. Those need no permission (§ 25(2) no. 2 TDDDG).
One thing does need your permission, and only runs once you give it: Google Analytics. It is off until you choose it in the notice, and off again the moment you take that choice back. You can change your mind at any time with "Cookie settings" at the bottom of any page. If your browser sends Do Not Track or Global Privacy Control, Google Analytics is never loaded, whatever the notice says.
Strictly necessary#
| Cookie | What it does | How long |
|---|---|---|
__Host-uplance_session | What it does: Keeps you signed in after you sign in. | How long: 30 days |
__Host-uplance_device | What it does: Recognises a browser you have signed in from, so other people's failed sign-ins can't lock you out. | How long: 180 days |
__Host-uplance_2fa | What it does: Carries you between the two steps of signing in. | How long: 10 minutes |
__Host-uplance_oauth | What it does: Protects signing in with Google or GitHub against forgery. | How long: 10 minutes |
__Host-uplance_passkey | What it does: Protects signing in with a passkey against forgery. | How long: 5 minutes |
__Host-uplance_saml | What it does: Protects single sign-on against forgery. | How long: 10 minutes |
lang | What it does: The language you picked. | How long: 1 year |
theme | What it does: Light or dark. | How long: 1 year |
consent | What it does: What you answered in the cookie notice, so we don't ask again. | How long: 1 year |
Outside production the same cookies appear without the `__Host-` prefix, which browsers only allow over HTTPS.
Analytics, only if you agree#
These are set by Google, and only after you have said yes.
| Cookie | What it does | How long |
|---|---|---|
_ga | What it does: Tells one browser from another, so repeat visits aren't counted as new people. | How long: 2 years |
_ga_* | What it does: The same, for this site's measurement ID. | How long: 2 years |
What they collect and where it goes is described under "Google Analytics" in our https://uplance.cloud/privacy. Advertising uses of Google Analytics are switched off, and the data is deleted after 14 months.
Things that are not cookies#
Status pages you publish load nothing from anyone else: logos you give us as a link are copied to our own servers first. Our own page counts store no cookie at all — they record the page, the site that linked to it and the day, and nothing that could identify you.
Questions#
Write to [email protected].