Cookies

Last updated 13 September 2026

Gist uses the minimum number of cookies needed to keep you signed in. No advertising, analytics, or cross-site trackers.

Cookies we set

• sessionid — a Django session cookie. Holds a random ID that maps to your logged-in session on the server. Necessary. Expires when you sign out or after 2 weeks of inactivity.
• csrftoken — Django's cross-site-request-forgery token, protecting form submissions from being forged by other sites. Necessary. Persists for 1 year.
• cookieOk — remembers that you've dismissed the cookie banner on this browser (a value of "1"). Local only, never sent to us. Persists until you clear site data.

If you use "Sign in with Google"

Google may set its own cookies on accounts.google.com during sign-in. Those are covered by Google's cookie policy, not this one.

Turning them off

You can clear site data or block cookies in your browser settings — but you won't be able to stay signed in without the sessionid cookie, and forms will refuse submissions without csrftoken.