Essential storage keeps private journeys secure. Analytics remains your choice.
This notice explains cookies and equivalent browser storage used by St. Nick's List. It should be read with the Privacy Policy.
Notice version: July 29, 2026
Essential security and sign-in
Required
Session, CSRF, recent-verification, invitation-exchange, guest-management, giver-session, and first-party referral storage keeps signed-in and private-link journeys secure and preserves a requested referral for up to 30 days. Disabling it prevents those features from working.
Preferences
Required
Theme and consent choices are stored on the device so the site can remember how you asked it to behave. These values are not advertising profiles.
Optional product analytics
Consent required
When consent is granted, privacy-limited analytics can measure product use and reliability. Automatic click capture and session recording are disabled, and form inputs are masked.
Review your choice
You can reopen the consent controls at any time. Withdrawing analytics consent stops future optional analytics on this device.
Retention and control
Security cookies last only as long as the related session, invitation, verification proof, or documented maximum. Revocation, sign-out, expiry, or account deletion invalidates the corresponding server-side authority even if a browser retains an old value.
A referral visit stores an opaque, HTTP-only, same-site token for no more than 30 days. It is used only to record privacy-limited first-party attribution, is removed after an eligible account conversion, and is not available to client-side scripts.
Browser settings can remove local storage. Removing essential values may sign you out or require a private invitation to be exchanged again.