The whole story. This marketing site sets no cookies at all. The application sets two, both of which exist to keep you signed in safely, and neither of which can be switched off without breaking sign-in. There is no analytics, no advertising, no tag manager and no third-party font anywhere — so there is no consent to collect and no banner to click away.
On this site
None. The marketing site is static HTML and CSS. It loads nothing from another domain, so no third party learns that you visited. If you submit the contact form, your email address is sent to us and nothing is stored in your browser.
In the application
Two cookies, both strictly necessary.
| Name | Purpose | Lifetime |
|---|---|---|
sessionid | Keeps you signed in. It is an opaque reference to a session record on our server — it carries no data about you itself.Set by the app, after you sign in. HttpOnly, so no script can read it. Secure over HTTPS. | Two weeks, or until you sign out |
csrftoken | Stops another site submitting a form to us as you. Without it, every write would be forgeable.Set by the app. Secure over HTTPS. | One year |
Blocking them signs you out and keeps you out — the second cookie is what stops another website submitting a form to us as you, so the app declines writes without it.
Browser storage the app uses
Separately from cookies, the app remembers small display preferences in your browser's own storage so a reload puts you back where you were: how wide you dragged the sidebar, the currency you chose, which filters and tabs you last had open. These are not cookies: they are not attached to requests the way a cookie is, none of them identifies you, and none of them holds your financial figures.
They stay until you clear your browser's site data, which you can do at any time without losing anything but those preferences.
If this ever changes
Adding an analytics or advertising tool would mean cookies that are not strictly necessary, and those need your consent before they are set — not a banner that assumes it. If we ever add one, this page changes first and a consent choice appears with it. Until then, the absence is the policy.
Questions: support@orkestar.eu.