Cookie Policy

Last updated: 1 May 2026 · Privacy

CME uses cookies (and similar local-storage values) for authentication, session continuity, and product analytics. Below is the full inventory. We never set advertising or cross-context behavioral cookies.

Cookie
Type
Purpose
Duration
cme_session
Essential
Authentication session (signed, HttpOnly, SameSite=Lax). Cannot be disabled.
8 hours
cme.cookie.consent.v1
Essential
Stores your cookie-banner choice so we don't show it again.
1 year (localStorage)
cme_csrf
Essential
CSRF token for form-style mutations.
Session
ph_*
Analytics
PostHog product analytics — page views + click events. Anonymized; opt-out via banner.
1 year
_vercel_*
Essential
Vercel hosting infrastructure cookies (deploy routing).
Session

Opting out

On first visit you see a banner with two choices: "Accept all" and "Essential only." Choosing essential disables the analytics cookies. You can change your preference any time by clearing your local storage and reloading any public page.

Essential cookies cannot be disabled — without them the Service cannot authenticate you, prevent CSRF, or remember your cookie choice.