AHDRC currently uses only first-party storage that is necessary for security, authentication, language preference, or the user-selected visual theme. AHDRC does not set optional analytics, advertising or profiling cookies.
Scroll horizontally to view all columns.
| Name | Type | Provider | Purpose | Created when | Duration | Strictly necessary? | If cleared or blocked |
|---|---|---|---|---|---|---|---|
| __Host-AHDRC.Auth | Cookie | AHDRC first party | Authenticates signed-in members. | After successful login. | Browser session without Remember me; up to 14 days with Remember me. | Yes | You are signed out or cannot sign in. |
| __Host-AHDRC.2FA.Pending | Cookie | AHDRC first party | Maintains the pending 2FA challenge after password verification. | When a 2FA-enabled account enters the 2FA challenge. | 5 minutes | Yes | The 2FA challenge cannot continue and you must log in again. |
| __Host-AHDRC.2FA.RememberDevice | Cookie | AHDRC first party | Remembers a device after a successful authenticator-code challenge. | Only when you select “Remember this device” and pass 2FA. | Up to 14 days | Yes for requested security preference | You will be asked for a 2FA code again. |
| __Host-AHDRC.Antiforgery | Cookie | AHDRC first party | Protects forms against cross-site request forgery. | When a protected form is rendered. | Browser session | Yes | Security-sensitive form submissions may fail. |
| __Host-AHDRC.Compare | Protected cookie | AHDRC first party | Stores only up to four selected positive artwork IDs for the comparison workflow. It never stores metadata or grants artwork access. | When a signed-in member adds an artwork to comparison. | Up to 30 days | Yes for requested comparison functionality | The comparison selection is cleared. |
| AHDRC.Culture | Cookie | AHDRC first party | Stores the selected language. | When you choose a language. | Maximum 6 months | Yes for requested language preference | The site returns to the default language or URL-selected language. |
| ahdrc-theme | Local storage | AHDRC first party | Stores the selected light/dark visual theme. | When you change theme. | Until changed or browser storage is cleared. | Yes for requested display preference | The default theme is used. |
The comparison cookie is encrypted and authenticated with ASP.NET Core Data Protection and is HttpOnly, Secure, SameSite=Lax, essential and host/path scoped. Its IDs are validated on every read and write; invalid or tampered state is cleared, and authorization and confidentiality are independently evaluated for every page load.
No consent banner is shown because AHDRC does not introduce optional cookies, trackers, analytics local storage or advertising storage. If optional analytics or other non-essential storage is introduced later, it must be blocked by default until a separate consent mechanism is approved and implemented.