Cookie-Richtlinie
Dieser Text ist vorerst nur auf Englisch verfügbar. Es gilt die englische Fassung.
ASafariM OS uses only cookies it needs to work, plus two that remember your theme and your language. There are no analytics, advertising or tracking cookies, and nothing from other companies, so there is no cookie banner.
What a cookie is
A cookie is a small piece of text a website asks your browser to keep and send back. Belgian law (article 129 of the Electronic Communications Act) and the GDPR allow cookies without consent when they are strictly necessary for a service you asked for. Every cookie below is of that kind.
The cookies we set
| Cookie | Where | What it does | How long |
|---|---|---|---|
asafarim-theme | All *.asafarim.site hosts | Remembers whether you chose the light or dark theme. Set only when you press the theme button. | 1 year |
asafarim-locale | All *.asafarim.site hosts | Remembers the language you chose (en, nl, fr or de). Set only when you choose one in the language selector. | 1 year |
identity_auth | id.asafarim.site | Keeps you signed in to your ASafariM account. | 12 hours, or until you sign out |
identity_login | id.asafarim.site | Holds one sign-in while you enter your code. | 15 minutes |
identity_complete | id.asafarim.site | Proves the last step of a sign-in comes from the browser that started it. | 1 minute |
_session, _session.sig | id.asafarim.site | Lets apps sign you in with your account (OpenID Connect) without asking again. | 14 days, or until you sign out |
_interaction, _interaction_resume (and .sig) | id.asafarim.site | Connects a sign-in to the app that asked for it. | 10 minutes |
__Host-asafarim.session-token | Each app (Admin, Docs, Notes), on its own host | Keeps you signed in to that app. It may be split into numbered parts (.0, .1) when large. | Up to 12 hours |
__Host-authjs.csrf-token | Each app, on its own host | Protects sign-in and sign-out forms against forged requests. | Until you close the browser |
__Secure-authjs.callback-url | Each app, on its own host | Remembers the page to return to after sign-in. | Until you close the browser |
__Secure-authjs.state, .pkce.code_verifier, .nonce | Each app, on its own host | Security checks that tie a sign-in reply to the request that started it. | 15 minutes |
__Host-asafarim.access | Docs and Notes, on their own host | A short-lived pass the OS checks before it lets a request through to the app. | Up to 10 minutes |
Cookies on __Host- names stay on the one host that set them: another app or subdomain cannot read them. Only asafarim-theme and asafarim-locale are shared across *.asafarim.site, so your theme and language follow you.
Other storage on your device
The OS's pages keep nothing in your browser's local storage or session storage, and load no third-party scripts, fonts or pixels.
Your choice
You can see and delete cookies in your browser's settings, or block them. Deleting the sign-in cookies signs you out; blocking them means you cannot sign in. Deleting asafarim-theme makes pages follow your system's light or dark setting again; deleting asafarim-locale shows them in English, or in your browser's language where a page can tell.
Questions? Email privacy@asafarim.site. How we handle personal data in general is in the privacy policy.