A random first-party visitor cookie helps recognize returning visitors for up to 12 months. The server stores a one-way hash of that random ID and session timestamps. A short-lived, salted hash of the network address is used for abuse limits and deleted within an hour; the raw address is not stored. A new visit is counted after 30 minutes without a counted visit. Clearing cookies or changing browsers may make the same person appear as a new visitor.