Cookie Notice
In force since November 7, 2026 · Version 2026-11-07.2
Cookie Notice
In force since November 7, 2026. ScholarFolk uses only cookies that are necessary to run the service. There are no advertising cookies, no analytics cookies and no third-party tracking.
Cookies we set
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
authjs.session-token (__Secure-authjs.session-token over HTTPS) |
keeps you signed in | 30 days, extended while you use the service | strictly necessary |
authjs.callback-url, authjs.csrf-token, authjs.state, authjs.nonce and their __Secure- / __Host- variants |
protect a sign-in that is in progress against forgery and replay | minutes, deleted when the sign-in completes | strictly necessary |
sf_locale |
remembers the language you picked when you are not signed in | 1 year | strictly necessary (your preference) |
sf_tz |
tells the server your time zone so dates render in local time | 1 year | strictly necessary (your preference) |
Browser storage (localStorage) is used only to remember small interface states such as a collapsed panel. It never holds account data.
Third parties
When you sign in with ORCID or Google, those providers set their own cookies on their own sites during the sign-in step, under their own policies. If the operator has enabled Cloudflare Turnstile on the sign-in form, Cloudflare may set a cookie on its challenge domain to complete the check.
Your choices
Because every cookie above is necessary for the service to work, no consent banner is shown. You can delete cookies in your browser at any time; you will then be signed out and the language will follow your browser settings again. Blocking cookies entirely prevents signing in.
Changes
If we ever add cookies that are not strictly necessary, we will ask for your consent first and update this notice.