Cookie policy
The Exchange currently sets only the cookies it needs to work. We do not use analytics, advertising or tracking cookies, and we do not share anything from your browser with advertising networks. Because nothing we set is optional, there is no consent banner and nothing for you to switch off.
Cookies we use
All three are strictly necessary, which means they are exempt from the consent requirement. They carry no advertising identifier and are readable only by this site.
| Cookie | What it does | Expires |
|---|---|---|
__Host-authjs.csrf-token | Protects sign-in and other form submissions against cross-site request forgery. | Session |
__Secure-authjs.callback-url | Remembers which page to return you to after you sign in. | Session |
__Secure-authjs.session-token | Keeps you signed in. Set only once you have signed in, and cleared when you sign out. | 30 days, or until you sign out |
Videos are played through Vimeo, which may set its own cookies in your browser when you start a video. That happens only if you play one. See our privacy policy for what Vimeo receives.
If we ever introduce analytics or marketing cookies, we will update this page first and ask for your consent before setting them.
Controlling cookies yourself
Your browser lets you block or delete cookies for any site. Blocking the cookies above will stop you signing in, because they are the mechanism that keeps you signed in and protects the sign-in form.