Cookie policy

Controller

The controller of the personal data of users of the Certyx service is Rafał Będkowski, a natural person operating the Certyx website available at https://certyx.space. The controller can be contacted about the processing of personal data at the e-mail address: support@certyx.space. The privacy policy describes the processing in detail.

What this site stores

No advertising, fingerprinting or external font services are loaded, and assets and scripts are served locally. The only optional category is web analytics (Google Analytics 4) on the public information pages, and only when it is switched on for this website and you consent. This information covers cookies and equivalent browser storage.

Necessary categories

__Host-clm.session: HttpOnly sign-in cookie, fixed-lifetime authentication ticket (30 minutes by default, set by the operator) that also ends after 15 minutes without activity by default, nonpersistent browser cookie. __Host-clm.csrf: HttpOnly anti-forgery cookie created when requesting a protected form token, nonpersistent browser cookie. Both use SameSite=Strict, are sent only over HTTPS (Secure) and, through the __Host- prefix, only to this host name. OIDC, when configured, uses temporary correlation and nonce cookies for sign-in.

Analytics cookies (only with consent)

_ga: distinguishes browsers for Google Analytics 4, up to 2 years. _ga_<ID>: keeps the session state of the measurement, up to 2 years. Both are first-party cookies set by the Google tag, which is loaded from www.googletagmanager.com only after consent; see the privacy policy for recipients and transfers.

Preference storage

clm.site.language and clm.language: local language preferences. clm.site.privacy: your privacy choice (necessary storage and, where offered, the analytics decision), its version and timestamp, asked again after 12 months. These records stay in browser storage and are not sent to a marketing provider. You can change the language or reopen the preferences from the footer and clear browser storage.

Your choices

When analytics is offered, the banner asks with equally prominent Accept and Reject buttons; nothing is loaded from Google before you accept, and rejecting loads nothing. You can change your choice at any time under "Cookie preferences" in the footer; withdrawing removes the analytics cookies. Without analytics the banner only confirms necessary storage. Advertising is never enabled. Authentication and CSRF cookies are created as part of requested sign-in, not as optional tracking. Sign-in, console and setup pages never load analytics.

Changes

Cookie names, durations and providers depend on the configured sign-in method; this policy is updated when they change.