Cookie and similar technologies policy

1. Scope and choices

This covers cookies, localStorage and sessionStorage. Choices apply only to the current site origin; the main website and subdomains have separate choices. Rejecting optional media does not block browsing. Closing the settings dialog is not consent.

2. Storage inventory

The application uses the following storage, without advertising profiling.

• hepta_auth — first-party HttpOnly administrator-session cookie, only after login, maximum 10 days. Scope depends on the deployment's cookie-domain configuration. Logout/browser tools remove it; rejecting optional media does not log an administrator out.
• lang — first-party cookie remembering an explicitly selected main-site language, maximum 365 days. Division language editions use URLs.
• theme — localStorage for the chosen light/dark appearance; no automatic expiry. Change the theme or clear browser site data.
• dismissed_announcement — sessionStorage remembering a dismissed announcement, for the browser session.
• hepta.cookie-preferences.v1 — localStorage containing necessary/external-media choices, version, saved/expiry time. Choices are valid for 180 days; expired choices no longer authorise media. The raw browser record may remain until cleared.
• cookie-consent — the previous accept/reject string is not new consent; it is removed when a new choice is saved.

3. External media

YouTube is blocked by default. After external-media permission, a youtube-nocookie.com player may load; the name does not mean no personal data is processed. IP, browser and playback information may reach Google/YouTube. Withdrawal removes open players and blocks future loads. This site cannot erase data already received or third-party-origin cookies. Use the provider's tools/browser controls for those. Third-party storage and duration depend on current provider behaviour and interactions; no fixed duration is promised.

4. Security and unused purposes

Cloudflare Turnstile does not automatically load on every page; you start it for a protected form. Its processing and possible storage depend on provider configuration. No Google Analytics, advertising pixel or advertising/analytics tracking cookie is installed. We do not offer misleading toggles for unused categories.

5. Changing your choice

Accept, reject optional and manage choices have equal prominence. External media starts unchecked. The persistent preferences button lets you withdraw permission. If persistent browser storage is blocked, the choice applies only to the open page. Browser settings can also block/clear site data, affecting session or preference functionality.