Legal
Cookies and storage
What the site actually stores today, and the anonymous audience measurement of the public site — without a cookie.
Actual state of the site
The banner at the bottom of the page records your choice for browser storage (consent, theme, sign-in). It is not a switch for audience measurement: that measurement uses neither a cookie nor local storage.
Refusing in the banner still prevents any non-essential cookie. The audience measurement described below sets none; it is therefore not controlled by that choice.
Required for operation
- Consent choice
- Browser local storage (cookie-consent key), 365 days. This is not an HTTP cookie. Purpose: not to ask again on every visit.
- Welcome message
- Local storage (welcome-shown key), 365 days. Purpose: show a welcome message only once.
- Light / dark theme
- Local storage. Purpose: remember your display preference. Needed for comfort; no tracking.
- Sign-in session
- HttpOnly cookie set by the authentication server, only if you sign in to the Unlock space or the Eva app. Purpose: recognise you, securely. Without this session, the account does not work.
- Session cache (signed-in space)
- sessionStorage, for the life of the tab, after sign-in. Purpose: avoid requesting your profile on every screen.
- EVA conversation
- Local storage possible for the thread on the public site. Purpose: resume the conversation in the browser. Do not paste sensitive data there.
Audience measurement
The public site sends a page view on each real navigation. We measure: the path viewed (no query string, no fragment), the page title as displayed, the referrer domain, the device family, the browser language, and the country inferred from the network address for the duration of the request. We set no audience cookie, no persistent identifier in the browser, no cross-site tracking. The IP address is never stored. No data is resold or transferred to a third party.
A visitor identifier is computed on the server by a daily hash (rotation each UTC day). Two visits on the same day can be told apart; the next day, the link is broken: nobody is followed over time. Records are kept for 395 days (duration configurable on the server), then deleted.
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com
Manage your choice
You can clear the site data in your browser settings: the banner will appear again. For a question, write to us.
The privacy policy describes processing that does not go through cookies (forms, requests, account).