Cookies
Big Brain Ltd, trading as Proper Blocks ยท Last updated 1 August 2026
The portal uses two cookies, and only if they apply to you. Both are strictly necessary for signing in, so we don't ask your consent for them - ICO and PECR guidance permits strictly-necessary cookies without a banner.
The cookies we set
- Name:
session
- Purpose: keeps you signed in between requests
- Flags: HttpOnly, Secure, SameSite=Lax
- Expires: 14 days after you sign in, or immediately when you sign out
- Third parties: none - the cookie is only readable by our own server
- Name:
dh_trust
- Purpose: set only if you tick "Remember me on this device for 30 days" when entering your two-factor code. It lets this browser skip the code screen. Your password is still typed and checked every time you sign in
- Flags: HttpOnly, Secure, SameSite=Lax
- Expires: 30 days after you tick the box, and using it does not extend that. It also stops working the moment you change or reset your password, turn two-factor off, or forget the device under Account > Remembered devices
- Third parties: none. We store only a one-way scrambled copy of the cookie's value, plus a rough device label ("Windows PC - Chrome") so you can recognise it in that list
Cookies we do not set
- No analytics cookies, and no analytics script in the page: no Google Analytics, no Plausible, nothing of that kind.
- No trackers, no pixels, no ad-tech.
- No social-media share-button cookies.
- No third-party CDNs at all. Cloudflare hosts the site, and its own web analytics measures page speed at the edge without a cookie, without a script in the page and without identifying you. Fonts are served from this domain, so nothing is fetched from Google.
If we ever add an analytics cookie
We will add a consent banner before it runs, and you will be able to reject as easily as accept.