Cookie Policy
ePrivacy and GDPR Article 7: consent for non-essential cookies.
Last updated:
We set no analytics, advertising or marketing cookies. Everything listed below is strictly necessary: it either keeps you signed in or records the consent choice you made. Browsing the public site sets nothing at all unless you turn analytics on, and even then nothing is stored in your browser.
Categories of cookies we use
- Strictly necessary / essential: required for sign-in and to record your consent choice. Always on. This is the only category currently in use.
- Functional: none in use. We store no language or region preference.
- Analytics / statistical: Vercel Web Analytics, and it is off until you switch it on. It is cookieless: it stores nothing in your browser and sets no identifier that follows you between visits. It records a page view with the page address, the referring page, your approximate country and your device type. The script and the measurement request are served from this domain, so your browser makes no request to another company; Vercel processes the result as our sub-processor.
- Marketing / advertising: none in use, and none is planned.
The consent controls offer analytics and marketing as separate choices. The gate was built before any tooling existed, so that anything added later would be off until you opted in. Analytics is now the first thing it governs: refuse it and the measurement code is never loaded at all, rather than loaded and asked to behave. Marketing still governs nothing, because nothing marketing-related is installed.
What we set, and where
The two consent entries are stored in your browser’s local storage rather than in cookies. ePrivacy treats both the same way, so both are listed here, with the storage medium named.
| Name | Category and storage | Purpose | Duration |
|---|---|---|---|
| sb-<project>-auth-token (may be split into …-auth-token.0 / .1) | Strictly necessary · cookie | Keeps you signed in to the AM8 application. Set only after you sign in; the public website never sets it. | Until you sign out or the session expires |
| aria_cookie_consent | Strictly necessary · localStorage | Records your consent choices, the policy version they were given against and the time you gave them, so we can honour them and evidence them under GDPR Article 7(1). | 12 months, then we ask again (also re-asked if this policy is versioned up) |
| aria_session_id | Strictly necessary · localStorage | A random identifier that links a consent decision to its server-side log entry. It carries no personal data and is not used to profile you. | Until you clear your browser storage |
How to manage your cookie preferences
You can change or withdraw your consent at any time. To manage your cookie preferences, use the control below or the cookie banner. Disabling non-essential cookies will not affect strictly necessary cookies.