Still signed in: what a session is and what it is not
An account is permanent; a session is the temporary interval you use it through. This desk explains that interval: which clock ends it and when, what resets the clock and what does not, how long a persistent sign-in can outlive it, how many devices can hold one at once, and what survives the moment it ends.
- samples
- 10 invented
- idle timeout
- 30 minutes
- absolute lifetime
- 12 hours
- persistent token
- 30 days
A session is the interval between signing in and being signed out, and two clocks can end it: an idle clock that runs from your last counted action, and an absolute lifetime that runs from the sign-in itself, whichever comes first. A placed bet is not in the session and survives it; a betslip that was never placed is not, and does not. Closing the tab ends neither clock.
What the samples show
The desk's whole argument fits in one figure, so it is stated first and then shown eight ways. The interval you are signed in for is not the interval you are using the account, and the two are set by different clocks. On the samples, a session signed in at 09:00 with a 30-minute idle timeout and a 12-hour absolute lifetime ends at 10:11 if you stop touching it at 09:41, and at 21:00 if you never stop - a range of 10 hours 49 minutes from the same settings. Five of eight candidate actions do not reset the idle clock at all, so a screen can look busy while the clock runs down. The bet placed two minutes before a session ends lives 14.7 times as long as the whole idle window that ended it. And the longest-lived thing in the whole picture is the one nobody looks at: a 30-day persistent sign-in outlives a 30-minute idle window by 1,440 times.
None of the samples describes a real operator, a real account or a real person. They are eight invented sets of settings and times, defined on this page, and every figure anywhere on the site is derived from them and can be re-derived from the arithmetic shown beside it.
Eight samples
One sign-in at 09:00 under a 30-minute idle timeout and a 12-hour absolute lifetime, with activity that stops at 09:41.
- signed in
- 09:00
- last activity
- 09:41
- ends
- 10:11 or 21:00
Eight candidate actions and which of them the invented rules count as activity.
- candidates
- 8
- counted
- 3
- not counted
- 5
Five sign-ins against a limit of three sessions at once, and which two ended.
- sign-ins
- 5
- live
- 3
- ended by the limit
- 2
The idle window, the session and the persistent sign-in, measured against each other.
- idle
- 30 minutes
- session
- 12 hours
- token
- 30 days
A bet placed two minutes before the idle sign-out, and when it is settled.
- placed
- 10:09
- session ends
- 10:11
- settles
- 17:29
The five ways the invented rules allow a session to end, and the ending that is not on the list.
- published
- 5
- on the list
- 5
- closed the tab
- 0 of 5
Ten lines of session history, and what each line does and does not carry.
- lines
- 10
- device
- 10
- who ended it
- 0
Six actions inside a session, three of which ask for the password again.
- actions
- 6
- rechecked
- 3
- not rechecked
- 3
Two further samples are defined on the pages that use them: sample I on the timeout table and sample J on what a session's end touches.
One sign-in, two endings
Sample A is the clearest place to start, because it shows that two clocks are running from two different moments. The idle clock starts again on every counted action; the absolute clock never restarts until the session is replaced by a new one.
| Moment | Clock | Ends at | Why |
|---|---|---|---|
| signed in | 09:00 | - | both clocks start here |
| last counted action | 09:41 | 10:11 | idle clock restarts from here |
| no further action | - | 10:11 | idle clock reaches 30 minutes |
| action every few minutes | - | 21:00 | idle never fires; absolute lifetime does |
| 2 endings, 1 sign-in | - | 10 h 49 m apart | same settings, different behaviour |
Why the activity list matters more than the timeout
The second worked example is the desk's central finding, and it is arithmetic rather than opinion. A timeout is only as long as its definition of activity allows.