Cookies
Cookies and storage
What Mandate SA stores in your browser, and why. No tracking, no advertising.
In short
Browsing the public website sets no cookies. Mandate SA uses no analytics, advertising or tracking technology. The only cookies are one fair-use cookie set when you ask Javi a question, and the sign-in cookies of the account portal and the staff Desk, which are needed to keep you signed in. That is why there is no consent banner: there is nothing optional to consent to.
What is used
| Name | Where | Purpose | Kind | How long |
|---|---|---|---|---|
| Theme preference (localStorage) | Every site | Remembers light, dark or system appearance. Stays in your browser and is never sent to us. | Preference (in your browser only) | Until you change it or clear your browser |
| javi_vid (Javi) | Public site, only once you ask Javi a question | A random, signed number that lets Javi apply its free daily question allowance fairly. It holds no personal details and no count; the server stores only a one-way scrambled form of it with the number of answers given that day, which is deleted after two days. HttpOnly and SameSite=Lax; in production also Secure. | Strictly necessary (fair-use limit) | 2 days |
| msa-acct-at, msa-acct-rt (account portal) | Accounts | Keeps you signed in: the session and its refresh. HttpOnly and SameSite=Strict; in production also Secure, with the __Host- prefix. | Strictly necessary | The session; at most 12 hours |
| msa-acct-pkce (account portal) | Accounts, while confirming an e-mail address or resetting a password | A one-time random value that ties the emailed link to the browser that asked for it, so the link cannot be used elsewhere. HttpOnly and SameSite=Lax; in production also Secure, with the __Host- prefix. Removed once used. | Strictly necessary | 1 hour |
| msa-desk-at, msa-desk-rt (Desk) | Staff Desk only | Keeps staff signed in, with the same protections. | Strictly necessary | The session; at most 12 hours |
| msa-desk-preview, msa-acct-preview | Desk and accounts, administrators only | Marks an administrator's labelled preview of the workspace as a member would see it. | Strictly necessary | Ends with the day at the latest |
| Dashboard layout (localStorage) | Staff Desk only | Remembers which dashboard panels a staff member collapsed. | Preference (in your browser only) | Until cleared |
Third-party content
Map backgrounds load from OpenFreeMap (tiles.openfreemap.org). That service receives your network address and the map area requested, but sets no cookies through Mandate SA. Cloudflare Turnstile, a check against automated abuse, is prepared for the submission, registration and password-reset forms but is not switched on. Links to other sites, such as Google Maps directions or official sources, take you to those sites and their own policies.
Your control
You can clear cookies and storage in your browser at any time. Clearing the sign-in cookies signs you out. If Mandate SA ever adds an optional technology, it will not run until you have agreed, and this page and the privacy policy will change first.