Cookies & tracking
Last updated 18 August 2026.
The short version
Nothing that identifies your device is collected until you choose. The banner appears before anything is read, and Reject all is one click, the same as Accept.
What we set, and when
Strictly necessary — always on, no consent required
| What | Purpose | Kept |
|---|---|---|
rvha_consent | Remembers the choice you made, so we stop asking | 12 months |
rvha_vid | An opaque random reference for your browser | 12 months |
| A keyed hash of your network address | Enforces one report per day and blocks abuse | 90 days |
The address hash is an HMAC using a secret key held outside the database. It can show that two submissions came from the same place; it cannot be turned back into an address, even by us with a copy of the database.
These are exempt from consent because the site cannot function safely without them. They are not used to build a profile, and they are not shared.
Analytics — only if you allow it
Aggregate page usage. No cross-site tracking, no advertising identifiers.
Device fingerprinting — only if you allow it
If you consent, we read and combine characteristics of your browser and device:
- Screen size, colour depth and pixel ratio
- Time zone and language settings
- Platform, processor core count, approximate memory
- Touch capability
- A rendering signature from the canvas and WebGL APIs
Combined, these usually identify your browser uniquely, which is the point: it lets your contributions build a reputation over time and lets us trace abuse.
This is genuine tracking and we are not going to describe it as anything else. It works without cookies, so clearing your cookies does not clear it. It is off unless you turn it on.
Sharing and sale of data — only if you allow it
If you consent, data collected about you may be shared with or sold to third parties. See the [terms of service](/p/terms).
Changing your mind
Your choice is recorded against the exact version of this notice that was on screen when you made it. When the wording changes materially, we ask again rather than relying on an old answer.
To withdraw consent, clear this site's cookies in your browser and the banner will reappear. Withdrawal is recorded, and we stop collecting under it from that point. To have data already collected deleted, write to us.