Like most websites, GAR uses cookies: small records a site asks your browser to keep. GAR sets only the ones the site needs to work — to know who you are from one page to the next, to keep you signed in on a browser where you chose to sign in, and to remember that you have seen the cookie notice. It sets none for advertising or marketing, and its audience measurement runs without cookies. Under EU law these cookies need no consent, which is why the notice at the foot of the page asks only to be read.
| Cookie | What it does | Lasts |
|---|---|---|
| _GAR6_session | The session: who you are between pages, the page you came from, the views you chose. Set for everyone. | Until you close the browser |
| remember_token | Keeps you signed in on this browser. Set when you sign in; removed when you sign out, or from Settings with Sign out everywhere. | Twelve months, or until you sign out |
| sign_in_browser | Ties a sign-in link sent by email to the browser that asked for it, so a link cannot sign in another browser. | One hour |
| gar_consent_seen | Records that you dismissed the cookie notice, so it is not shown again. A second cookie, cookie_eu_consented, is set alongside for older pages. | One year |
Audience measurement is done with Matomo, configured without cookies: it does not recognise you from one visit to the next, and it honours your browser's Do Not Track setting. There are no advertising, marketing or social-media cookies on GAR, and GAR does not track you across other sites.
Two services GAR relies on store something of their own in your browser:
| Stored | By whom, and why | Lasts |
|---|---|---|
| _GRECAPTCHA | Google reCAPTCHA, on the sign-up page only: it tells a person signing up from an automated program. Google's own cookie, under Google's privacy policy. | Six months |
| NRBA_SESSION | New Relic's browser agent, which reports how quickly pages load so that GAR can watch the site's health. Kept in the browser's local storage rather than as a cookie. | Until the browser's session ends |
Your browser also fetches fonts and scripts from Google Fonts, Cloudflare's cdnjs and DataTables, which see your IP address as any web request shows it; they set no cookies for GAR. The privacy notice says what each service is given.
Every browser lets you see the cookies a site has set, delete them, block them for one site or for all, or block only third-party cookies. The setting is under Privacy or Site data in the browser's settings; the browser's help pages describe where. If you block GAR's own cookies you can still read the site, but you cannot sign in or keep your selections.
For more about cookies in general, see allaboutcookies.org.
This statement was last revised on 20 October 2026, to list each cookie the site sets. GAR will revise it when the cookies change.