COOKIES NOTICE

Cookies are small text files a website stores on your device. They let the site remember things like whether you're signed in, so you don't have to log in on every page. This notice tells you exactly which cookies Science of Rowing sets and why.

What we set

We use only strictly-necessarycookies. We do not run analytics, advertising, fingerprinting, or social-media tracking cookies on this site. Because of that, you don't see a cookie consent banner: under UK GDPR and the Privacy and Electronic Communications Regulations (PECR), strictly-necessary cookies are exempt from the consent requirement.

Cookie inventory

The complete list of cookies set by this site:

• authjs.session-token (or __Secure-authjs.session-tokenon HTTPS): your sign-in session. Set when you log in via Memberful; removed when you sign out or the session expires.
• authjs.csrf-token: protects sign-in and account actions against cross-site request forgery. Required for any login to work safely.
• authjs.callback-url: remembers the page you were on when you signed in, so we can return you there. Cleared after the login completes.

All three are HttpOnly (not accessible to JavaScript) and SameSite=Lax (not sent on cross-site requests).

What we deliberately don't set

• Vercel Analytics + Speed Insights: used to measure page-load performance and traffic. Cookieless by design. Vercel uses a stateless hash that doesn't identify or track you across visits.
• Sentry: used to catch JavaScript errors so we can fix them. Session replay is deliberately disabled, so no tracking cookies are set.
• Google Analytics, Meta Pixel, advertising networks, retargeting, fingerprinting. None of these are loaded.

Cookies set by third parties when you sign in

When you click “Sign in”, you're taken to memberful.comto authenticate. Memberful sets its own cookies on its own domain to manage that login flow. Those are first-party to Memberful, not to us. Memberful's cookie practice is documented at memberful.com/privacy-policy. We do not embed Memberful tracking on this site.

If a payment is involved, Stripe handles the checkout on stripe.com and sets its own cookies there for fraud prevention. See stripe.com/privacy.

How to manage cookies

Because we only set strictly-necessary cookies, blocking them in your browser will prevent you from signing in or staying signed in. Browsing without an account works without cookies.

Browser instructions for managing or deleting cookies: Chrome · Safari · Firefox · Edge. The ICO maintains general guidance at ico.org.uk.

Changes to this notice

If we ever add a non-essential cookie (analytics, advertising, fingerprinting), we'll deploy a cookie consent banner before that cookie is set, and update this page first. Until then, this notice reflects the live inventory.

Contact

Questions: joe@scienceofrowing.com.