In short
- We set only strictly necessary cookies: one keeps you signed in, and a second one exists for a few minutes only while you sign in with Google or Microsoft, if that option is offered.
- No analytics, advertising, social media or other third party cookies. No tracking pixels and no fingerprinting. The site loads no third party scripts; fonts and icons come from our own server.
- Your display preferences (language, menu state, saved views) are kept in your browser's local storage when you choose them. They are not sent to us.
- Because nothing optional is stored, there is no consent banner. If we ever add optional cookies, we will ask for your consent first.
- This policy is written in English, and the English version is the binding one. Translations are provided for convenience.
Cookies we set
| Name | Purpose | Duration | Category |
|---|---|---|---|
| ayb_sid | Keeps you signed in. It holds a random session token; the server stores only a SHA-256 hash of it. HttpOnly, SameSite=Lax, Secure. | At most 7 days; the session ends after 12 hours without activity or when you sign out | Strictly necessary |
| ayb_sso | Only when you sign in with Google or Microsoft: binds the sign-in in progress to your browser to prevent login forgery. HttpOnly, SameSite=Lax, Secure, sent only to the sign-in address. | 10 minutes; deleted after sign-in | Strictly necessary |
The protection against request forgery does not use a cookie: the server gives the page a token that the page keeps in memory and sends with each change.
Under the Privacy and Electronic Communications Regulations 2003 (and the ePrivacy rules in the EU), storage that is strictly necessary for a service you asked for does not need consent.
Preferences stored on your device
These keys are written to your browser's local or session storage only when you use the related feature. They stay on your device and are not sent to us.
| Key | Storage | What it remembers |
|---|
You stay signed in; only display preferences are removed.
Offline copy and browser notifications
The site installs a small service worker. It keeps a copy of the site's own files and of up to 40 recently opened pages in your browser's cache, so pages load faster and an offline page can be shown when the network is down. It never stores answers from the account interface (/api) or pages that set cookies. If you switch on browser notifications, the same service worker shows them. You can remove it, and its cache, in your browser's site settings.
Your controls
You can delete cookies, local storage and cached files at any time in your browser settings. If you delete the session cookie, you are signed out. Blocking the session cookie prevents sign-in. Questions: info@aybarion.com.