One cookie, and no banner.

What we set

Name	What it does
bw_session	Keeps you signed in. It holds a random token and nothing else, it is HttpOnly so scripts cannot read it, and it lasts sixty days or until you sign out. Set only when you sign in.

That is the entire list. Under the UK's PECR rules a cookie that is strictly necessary for a service you asked for does not need consent, and one that exists purely to keep you signed in is the textbook example. There are no analytics on this site, no advertising, no tracking pixels and no third-party marketing scripts.

Storage that is not a cookie

Two things are kept in your browser rather than sent to us. They never leave your machine, which is why they are not cookies and not shared with anybody.

Name	What it does
bitwright.shelf	The sprites you have drawn, so they are still there tomorrow. This is your work, held locally. Clearing your browser data deletes it and we cannot recover it.
bitwright.visit	A random number for this browsing session, so drawings can be counted per sitting when working out pricing. It is not a person, it cannot be traced to one, and it disappears when you close the tab.

What others may set

One service this site depends on can set its own cookies on its own domain, and they are security rather than tracking.

• Cloudflare hosts the site and runs the bot check. It may set cookies such as __cf_bm to tell people from scripts. These are security cookies and are covered by the strictly necessary exemption.

Turning them off

You can block or delete cookies in your browser settings. Blocking bw_session means you cannot stay signed in, so the workbench will keep sending you back to the sign-in page. Clearing local storage deletes your shelf.

If we ever add anything that is not strictly necessary, analytics included, you will get a proper consent banner with a real reject button, and this page will say so before it happens.