Cookies,
and your choice.
Cookies are small text records a website stores in your browser. THIS WK NYC uses the few it needs to sign you in and keep forms safe, one to remember your choice, and — only with your OK — Google's measurement cookies on public pages. Nothing else.
Your choice
Your decision is remembered for six months in the thiswk_consent cookie and can be changed here at any time. Declining never removes a feature. Withdrawing consent stops the tag on your next page view and expires Google's cookies for this site; you can also clear them in your browser's settings.
The cookies we use
| Cookie | Set by | Purpose | Type | Lasts |
|---|---|---|---|---|
thiswk_session | thiswk.nyc | Keeps you signed in. Contains a random session token (stored hashed on our side), never your email or password. HttpOnly, Secure, SameSite=Lax. | Strictly necessary | 30 days, or until you log out or revoke the session |
__Host-csrf (or thiswk_csrf on local HTTP) | thiswk.nyc | A signed token that proves a form or request came from this site and your browser, protecting you from cross-site request forgery. | Strictly necessary | 30 days |
thiswk_consent | thiswk.nyc | Records whether you accepted or declined analytics so we neither load it without permission nor ask again on every page. | Strictly necessary (your preference) | 180 days |
__cf_bm, cf_clearance | Cloudflare | May be set by Cloudflare, whose network protects this site, to tell automated abuse from real browsers. Not used by us for anything else. | Strictly necessary (security) | Up to 30 minutes / up to 1 year |
_ga | Google Analytics | A random identifier that lets Google count visits and returning visitors on our public pages. Only set after you accept. | Analytics (optional, consent) | 2 years |
_ga_RVKHHLLCTJ | Google Analytics | Session state for the same measurement property. Only set after you accept. | Analytics (optional, consent) | 2 years |
We use no local-storage tracking, no fingerprinting, no advertising cookies, no social-media buttons or embedded players, and no cookies from anyone other than the parties listed here.
About the optional analytics
If you accept, public and discovery pages load Google Analytics 4 (Google LLC). Google receives the page address, your IP address (which Google Analytics 4 does not log or store), your browser and device type, an approximate city-level location, and its cookie identifier, and reports aggregate page views and sessions to us. We have disabled Google Signals, advertising personalization and ads-data sharing, and we do not send Google your email, name, lists, plans or anything you typed. The tag is never loaded on sign-in, account, people, list, gang, chat, invitation, request, verification or password-reset pages, whatever you chose, so private links and your activity there are not reported to Google. Google's own description of how it handles data is at policies.google.com/technologies/partner-sites. You can also block the tag with a content blocker or Google's opt-out add-on; nothing on this site breaks.
Browser signals and other controls
We honour the Global Privacy Control (GPC) and Do Not Track signals: a browser that sends either is treated as having declined analytics, in every state and country, without a banner. Most browsers also let you view, block or delete cookies for a site; blocking the strictly necessary cookies will prevent signing in and submitting forms. Turning off JavaScript does not affect your choice here — the buttons above work without it.
Questions about cookies: [email protected]. See also the Privacy Policy.