Cookies

The session cookie

Name: sb_session. It holds a random token that tells the site you are signed in; the database stores only a hash of it, so a leak of our database yields no usable session. It is set when you sign in or create an account, and it is httpOnly (scripts on the page cannot read it), sent only to starbook.si, and over HTTPS only.

It lasts 30 days and is renewed while you use the site. Signing out deletes it, as does changing your password (on your other devices) or deleting your account.

The theme cookie

Name: sb-theme. It holds one word, the theme you picked (system, dark, light or night), so the page is drawn in it from the first moment instead of flashing dark first. It is set only when you choose a theme, or when you sign in to an account whose theme is not the default, and it lasts 400 days. It identifies nothing about you; signed in, your theme is also kept on your profile so it follows you to other devices.

The sign-in code cookie

Name: sb_signin. It is set only when you ask for an emailed sign-in code. It tells the site that this browser is the one that asked, so the code you type, or the link in the email opened in this browser, is checked against your request. It holds two random tokens and nothing about you; the database stores only hashes of them. It is httpOnly (scripts on the page cannot read it), sent only to starbook.si, and over HTTPS only.

It lasts 15 minutes (asking for the code again renews it). It is deleted as soon as you sign in, or if you choose to use a different email.

The Google sign-in cookie

Name: sb_oauth. It is set only when you choose Continue with Google or Connect Google, and it holds random values that let the site check that the answer coming back from Google is to your request, plus the page you were heading to. It identifies nothing about you. It is httpOnly (scripts on the page cannot read it), sent only to the Google sign-in address on starbook.si, and over HTTPS only.

It lasts 10 minutes and is deleted as soon as Google sends you back.

What we do not set

No advertising cookies, no analytics, no tracking pixels, no social-media widgets that follow you around. Share buttons on Starbook are plain links: nothing loads from X or Facebook until you click one.

Pictures are delivered by our storage and delivery providers (see the privacy page); they set no cookies on starbook.si.

Why there is no banner

A cookie that is strictly necessary for a service you asked for, such as staying signed in or showing the site in the theme you chose, does not need consent. Since those are the only four we set, there is nothing to ask you about.

Your control

You can block or delete cookies in your browser at any time. Starbook works for browsing without them; you just cannot sign in, and the site is shown in its dark theme.