In short
Silkworm 2047 only uses essential technical storage: the session cookie when you sign in, Cloudflare Turnstile’s anti-abuse check and two preferences in the browser’s local storage. There are no advertising, social media or analytics cookies. That is why we show no consent banner: this storage is exempt under article 22.2 of the Spanish LSSI-CE.
What we store
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| __Host-silkworm_access | The API (silkworm-api.xmassoftware.com) | Keep you signed in | Minutes; renews itself |
| __Secure-silkworm_refresh | The API | Renew the session without typing your password again; only sent to the authentication routes | Up to 30 days from sign-in |
| sw.session (local storage) | The website | A flag with no account data saying this browser signed in, so the API is not asked if you never did | Until you sign out |
| sw.theme (local storage) | The website | Remember the light or dark theme if you pick one by hand | Until you go back to the system theme |
Session cookies are HttpOnly (JavaScript cannot read them), Secure (HTTPS only) and SameSite (never sent from other sites). They only exist if you sign in and are deleted when you sign out. The API sets the exact names.
Anti-abuse protection
Registration, sign-in, password recovery, verification resend and download links use Cloudflare Turnstile to check you are human. Turnstile may use storage strictly necessary for that security check, not to track you across sites.
Cookieless analytics
We measure visits in aggregate with Cloudflare Web Analytics on public pages. It uses no cookies or browser storage and builds no visitor profiles.
How to control it
You can delete or block cookies and local storage in your browser settings. If you block session cookies you will not be able to sign in, but public content remains available.
Contact: info@silkworm.xmassoftware.com