Cookie-free public website
No PHP session or cookie is created for public visitors. Language, CSRF protection and operational browsing logs work server-side without writing a persistent visitor identifier to the device.
The public website runs without Cookies or LocalStorage. A secure administrative session is used only under /admin for authorized staff sign-in.
No PHP session or cookie is created for public visitors. Language, CSRF protection and operational browsing logs work server-side without writing a persistent visitor identifier to the device.
Google Analytics, Meta Pixel and other browser advertising tools that set cookies are disabled in the current no-cookie mode. Operational events are recorded server-side for administration.
The only exception is an HttpOnly, Secure, SameSite=Strict session cookie scoped to /admin to protect authorized administrator sign-in.