Cookie Policy | Obrasken

01

What we use, item by item

Strictly necessary cookies plus browser storage for your own preferences.

Item	Type	Purpose	Lifetime
Authentication session	Cookie (essential)	Keeps you signed in and refreshes your session	Until sign-out or expiry
CSRF / state token	Cookie (essential)	Protects sign-in and form submissions against cross-site request forgery	Session
MFA / recovery intent	Cookie (essential)	Carries a short-lived step-up or password-recovery intent	Minutes
Interface preferences	Local storage	Remembers theme, beginner/pro mode, and panel layout	Until you clear it
Workspace autosave	Local storage	Keeps in-progress work so a refresh does not lose it	Until you clear it
Dismissed notices	Local storage	Remembers which announcements you closed	Until you clear it
Stripe checkout	Third-party cookie	Set by Stripe on its hosted pages to process payment securely	Governed by Stripe

02

Why there is no cookie banner for these

Under the ePrivacy rules, consent is not required for storage that is strictly necessary to deliver a service you requested. Sign-in, CSRF protection, and remembering your own interface choices fall into that category, so we use them on that basis rather than asking for consent we would have to ignore.

The notice you may see on first visit explains this and records your acknowledgement — it is not an advertising consent prompt.

03

What we do not use

No third-party advertising or retargeting pixels.
No cross-site behavioural tracking.
No data brokers, and no selling or sharing of personal data for advertising.
No analytics that profile individuals. If we add product analytics, this page will list it and, where required, it will be behind consent.

04

Managing it yourself

You can clear cookies and site data in your browser settings, or block them per site. Blocking essential cookies will prevent sign-in from working. Clearing local storage resets your interface preferences and discards unsaved workspace autosaves.

Questions: privacy@obrasken.com.

--

Version history

Version 2.02026-07-29: Itemised each cookie and storage key with purpose and lifetime, and added the legal basis for using them without a consent banner.
Version 1.02026-07-11: First published policy.