Cookies

Steeplejack only sets cookies it needs to work, so there’s nothing to accept or decline. There are no advertising or tracking cookies, and visit counting with GoatCounter uses no cookies at all.

steeplejack-session

Keeps you signed in as you move between pages, and remembers a site you were adding while you sign up. Its contents are encrypted. It expires after two hours without activity.

XSRF-TOKEN

Protects forms from being sent by another site on your behalf. It expires with the session.

remember_web_…

Only set if you tick “Stay signed in”, so you don’t have to sign in again on that browser. It lasts up to 400 days, or until you sign out or change your password.

Other sites

Surveying a site doesn’t set any of its cookies in your browser. Steeplejack’s scanner loads the site separately.

More

Privacy explains what else Steeplejack keeps and why.

Updated

9 November 2026