Legal
Last updated: 20 September 2026
A cookie is a small file a website leaves in your browser. Most of the ones below exist because the site cannot work without them: they keep you signed in, protect the sign-in itself, and remember the choices you make here. Those need no permission (§ 25(2) no. 2 TDDDG).
One thing does need your permission, and only runs once you give it: Google Analytics. It is off until you choose it in the notice, and off again the moment you take that choice back. You can change your mind at any time with "Cookie settings" at the bottom of any page. If your browser sends Do Not Track or Global Privacy Control, Google Analytics is never loaded, whatever the notice says.
| Cookie | What it does | How long |
|---|---|---|
__Host-uplance_session | Keeps you signed in after you sign in. | 30 days |
__Host-uplance_device | Recognises a browser you have signed in from, so other people's failed sign-ins can't lock you out. | 180 days |
__Host-uplance_2fa | Carries you between the two steps of signing in. | 10 minutes |
__Host-uplance_oauth | Protects signing in with Google or GitHub against forgery. | 10 minutes |
__Host-uplance_passkey | Protects signing in with a passkey against forgery. | 5 minutes |
__Host-uplance_saml | Protects single sign-on against forgery. | 10 minutes |
lang | The language you picked. | 1 year |
theme | Light or dark. | 1 year |
consent | What you answered in the cookie notice, so we don't ask again. | 1 year |
Outside production the same cookies appear without the `__Host-` prefix, which browsers only allow over HTTPS.
These are set by Google, and only after you have said yes.
| Cookie | What it does | How long |
|---|---|---|
_ga | Tells one browser from another, so repeat visits aren't counted as new people. | 2 years |
_ga_* | The same, for this site's measurement ID. | 2 years |
What they collect and where it goes is described under "Google Analytics" in our https://uplance.cloud/privacy. Advertising uses of Google Analytics are switched off, and the data is deleted after 14 months.
Status pages you publish load nothing from anyone else: logos you give us as a link are copied to our own servers first. Our own page counts store no cookie at all — they record the page, the site that linked to it and the day, and nothing that could identify you.
Write to [email protected].
© 2026 Uplance