Cookie Policy

How we use cookies

Cookies are small files stored on your device. We use them to keep the site working, remember optional comment details, and to measure public-page use with Google Analytics 4 telemetry. Analytics is mandatory on this publication. We do not use advertising cookies.

The first time you visit, a notice explains that necessary cookies and Analytics are used. There is no option to customise or reject Analytics. Browser tools outside this site can still block third-party measurement in that browser.

Strictly necessary

These cookies are required for security and basic operation.

• living-outlook-session — first-party session cookie from this site. Purpose: keep a browsing session, including sign-in after a magic link. Duration: the session lifetime (typically up to 120 minutes of inactivity). Consent: not required.
• XSRF-TOKEN — first-party CSRF cookie from this site. Purpose: stop other websites from submitting forms as you. Duration: matches the session. Consent: not required.

Authentication / session

After you follow a magic sign-in link, the same session cookie identifies the signed-in account. If you stay signed in, Laravel may also set a remember-me cookie on this host. The administration area uses the same session stack. These are first-party operational cookies, not analytics.

Preferences

• vl_commenter — first-party cookie from this site. Purpose: remember a guest name and email if you ask the comment form to do so. Duration: about 400 days. Consent: set only if you comment and ask to be remembered. Not an analytics cookie.
• vl_reactor — first-party cookie from this site. Purpose: stop the same browser inflating a reaction count. Duration: about 400 days. Consent: set when you use reactions. Operational, not analytics.
• vl_cookie_consent — first-party cookie from this site. Purpose: record that you have seen the cookie notice. Duration: about 365 days. Consent: this cookie is not itself an analytics tracker.

Analytics

Google Analytics 4 collects telemetry for analytic purposes: page views, engagement, device and browser information, and approximate location derived from IP. Advertising storage, ad user data and ad personalisation stay denied. We have not added advertising features.

A GA4 Measurement ID is currently configured. Google typically sets:

• _ga — set by Google Analytics. Purpose: distinguish browsers for aggregated usage measurement. Provider: Google. Duration: up to about two years. Consent: required. Analytics is mandatory on this site.
• _ga_<container> — set by Google Analytics 4 for the configured property. Purpose: persist the GA4 session state. Provider: Google. Duration: up to about two years. Consent: required. Analytics is mandatory on this site.

We do not enable Google Signals or advertising features. The site does not offer a preference panel to disable these cookies.

First-party records that are not cookies

Outbound editorial clicks through /out/…, application logs and account activity are first-party operational records. They are described in the Privacy Policy and are not Google Analytics.