Cookies

Essential — always on

• overtake_session — keeps you signed in. HttpOnly, so JavaScript cannot read it. 30 days.
• overtake_csrf — protects against cross-site request forgery. Readable by the page on purpose, because that is how the check works. 30 days.
• overtake_anon — a random identifier with no personal data in it, used to count how many people reach each step. Never derived from your IP address. 180 days.

Optional — only after you accept

• Product analytics, which help us see which parts of the product actually help. Declining costs you nothing: every feature works either way, and we still count the funnel in aggregate on our own server without a cookie.

Changing your mind

Clear this site's data in your browser and the banner reappears. We do not hide the decline button, and we do not ask again after every page.

What we never use

No advertising cookies, no cross-site trackers, no fingerprinting, and no third-party pixels.