Legal
Cookie Policy
Last updated 22 October 2026
1. What cookies are
Cookies are small pieces of data stored by your browser. Some are essential for signing in and protecting forms; others are optional. This site also uses browser local storage for your analytics choice.
2. Essential storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sidox_session | Cookie | Keeps you signed in. HttpOnly, SameSite=Lax, Secure in production. Contains a random session token, not your password or profile. | Up to 30 days |
| sidox_oauth | Cookie | Short-lived, encrypted state for Google sign-in (CSRF and PKCE protection). Set only when you start Google authentication. | Minutes |
| sidox-consent-v1 | Local storage | Remembers whether you allowed or declined optional analytics. | Until cleared |
3. Optional analytics
If a Plausible domain is configured and you choose “Allow analytics”, a cookieless script records anonymous page views and referrers. It does not use cookies or build a cross-site profile. If you decline, the script is never loaded. Declining does not affect any feature.
4. What is not used
- No advertising or retargeting cookies.
- No social-media tracking pixels.
- No third-party session recording by default.
- No analytics before consent.
5. Managing your choice
Use the consent banner shown on your first visit. To change your choice later, clear the sidox-consent-v1 entry in your browser’s local storage and reload the page. You can also block or delete cookies in your browser settings, though blocking the session cookie will prevent sign-in.
6. Third-party services
Hosting, database, email and payment providers may process technical request data under their own policies. See the Privacy Policy for the current provider list.
7. Contact
Questions about cookies or privacy: [email protected].