Cookie Policy

Last updated: 25 October 2026

PortKnot uses only essential cookies at present.

Session cookie

pk_session is HttpOnly, Secure in production, SameSite=Lax, and scoped to the app. It keeps you logged in. Logging out clears it.

CSRF and security

We validate Origin/Referer headers for state-changing requests. No advertising, profiling, or third-party analytics cookies are currently set.

Managing cookies

Blocking essential cookies prevents login. You can clear cookies in your browser.

If analytics or marketing tools are added, this policy and consent handling must be updated before launch.