1. What counts as storage
Cookies are values a browser sends with requests. Local storage stays in a browser until removed or expired by the application; session storage is scoped to a browser tab. Similar rules can apply to all of these technologies. The choices below relate to this browser, not every device you use.
2. Storage inventory
- altapis_owner — first-party, HttpOnly authentication cookie for a signed-in owner; eight-hour maximum; Secure on production HTTPS; SameSite=Strict. Not set merely by reading the public archive.
- altapis_owner_preview — owner authentication for the explicitly configured private local preview; eight hours; HttpOnly and SameSite=Strict. Not a public advertising identifier.
- altapis-privacy-v1 — first-party local storage containing only the policy version, external-image choice and expiry timestamp. Saved only when you make a choice, valid for 90 days, used to honour that choice rather than identify you.
- altapis-campaign-token — session storage for a requested campaign report/checkout flow, cleared when the tab session ends. Treat this as a private access key. Older versions used persistent local storage; the preferences control can remove that legacy key without opening it.
- Ordinary browser caching — local copies of public styles, scripts, fonts and pages may be cached to load the site. This is not an advertising profile.
3. Optional external images
Article images uploaded to AltAPIs load from this site. HTTPS images on other websites are blocked by default, including in the initial server-delivered page. Choosing “Allow external images” permits those requests; the host receives your IP address and browser details and may have its own cookie/logging practices. A placeholder identifies the host before you decide.
Allowing images does not allow analytics or advertising scripts: neither is installed. Fonts are locally served and need no request to Google. External links you deliberately follow leave AltAPIs; that destination’s cookie choices apply there.
4. Making and changing a choice
“Essential only” and “Allow external images” are equally available. Closing or ignoring the notice never counts as consent. Use Cookie preferences in the footer or on this page to revisit your choice or turn images off. Withdrawing stops future optional requests; it cannot retract information already sent to an image host.
Global Privacy Control or Do Not Track keeps optional images off even if an older saved preference allowed them. If browser storage is unavailable, the choice can work for this visit but cannot be remembered. Clearing browser storage removes preferences and requests a new choice.
5. What preferences do not do
The essential delivery of a web page still reveals network information to the server, and security logging may continue. These choices do not subscribe or unsubscribe you from email, submit a data-deletion request, or automatically log an owner out. Use the newsletter unsubscribe link, private request centre, or owner sign-out control for those actions.