Draft — pending lawyer approval before publication

This document is a draft. It must be reviewed and approved by a lawyer before publication and use.

Fields in [square brackets] must be completed with concrete details (e.g. legal name, company ID, contacts) before use.

Legal document

Cookie Policy

Version 1.0 (draft) · 3 Jul 2026

Cookies are small files stored by your browser. We use them to make the portal work and — only with your consent — to understand and improve its use.

1. Cookie categories

Strictly necessary (no consent): required for the portal to work — login, 2FA, security (CSRF protection) and remembering your cookie choice.
Analytics (consent only): help us measure traffic and usage to improve the portal. We prefer a privacy-friendly tool with EU-based data.
Marketing (consent only): used for ad targeting and measurement. Active only if you explicitly allow them.

The exact list of cookies [TO COMPLETE based on the tools actually deployed].

Name / group	Purpose	Category	Duration
session / auth	Login and session	Necessary	session
csrf_token	CSRF protection	Necessary	session
cookie_consent	Store your consent	Necessary	[6–12 months]
[analytics_*]	Traffic measurement	Analytics	[per tool]
[marketing_*]	Ad targeting	Marketing	[per tool]

On your first visit we show a cookie banner to accept, reject or configure categories.
Necessary cookies are always on; analytics and marketing run only after your explicit consent (off by default).
Consent is granular, freely given and as easy to withdraw as to give.
We keep a record of your choice (proof of consent) in line with the GDPR.

You can change or withdraw consent anytime via the "Cookie settings" link in the footer, or manage cookies in your browser.

Analytics and marketing cookies may come from third parties and run only after consent. [TO COMPLETE: specific providers, ideally with EU-based data]