Cookie notice

Storage inventory

Necessary authentication uses the HTTP-only dpp_session cookie for no longer than the underlying signed-in session and a dpp_login_state cookie for approximately ten minutes during sign-in. These cookies use SameSite=Lax; secure transmission is required in production. Necessary security, functionality and consent-preference storage is always active.

The key dpp_tracking_consent_v1 is stored in local storage until you change the choice or clear site data. It records the consent version, decision time and whether analytics and marketing measurement were accepted. Local storage is browser storage rather than a cookie, but it is disclosed here because the same consent rules may apply.

Optional Google measurement

If the operator enables Google measurement and you opt in, Google Analytics may receive page-view, sign-in and purchase events; Google Ads may receive configured conversion events. The Google script is not requested when optional measurement is rejected. No optional choice is required to browse the site or use core account functions.

After analytics consent, Google Analytics sets the _ga and _ga_<id> cookies, which expire after 13 months. After marketing consent, Google Ads may set _gcl_ cookies and Microsoft may set _uet and MUID identifiers for conversion measurement. Google and Microsoft may process this data in the United States under the safeguards described in the privacy notice.

Directive 2002/58/EC, Article 5(3) ↗

Consent and withdrawal

The first visit provides direct controls to accept all or continue without accepting, plus granular analytics and marketing choices. No optional choice is preselected. The Privacy choices control reopens the panel at any time; withdrawal updates consent, removes accessible measurement cookies and reloads without optional tags.

Browser settings can also block or delete storage. Blocking necessary session cookies prevents sign-in, while rejecting analytics or marketing does not reduce the core service.

EDPB Guidelines 05/2020 on consent ↗

Changes to this inventory

This notice is updated before any new non-essential tracker is added or a purpose materially changes. A new purpose that requires consent must not be activated under an older choice that did not clearly cover it.

Customers embedding public passports or widgets on their own sites are responsible for the cookies and tracking on those sites and for presenting their own notices and controls where required.