Legal
This site sets four cookies, every one of them to run a sign-in or to remember the choice you made below. It runs no analytics, no advertising, no heat-mapping and no third-party scripts unless you ask for one, which only the map on the contact page is — and none in the product behind it.
This document is not finished.
It is written against what this software actually does, and it has not been reviewed by a lawyer. The marked placeholders are facts only the operator of this instance can supply — hover one to see what it needs. They are left visible on purpose: a policy that named a company which does not exist, or an address nobody reads, would be worse than one that says it is incomplete.
Every cookie this site sets
Each of these is set by this site itself, from its own origin. None comes from a third party, and none is shared with one.
| Name | What it is for | Lifetime | Readable by page scripts? |
|---|---|---|---|
token | Your sign-in session. Sent with each request so the server knows who you are. | 24 hours | No — the browser refuses to expose it to JavaScript |
refresh_token | Renews the session so you are not signed out mid-task. Sent only to the refresh endpoint. | 14 days | No — the browser refuses to expose it to JavaScript |
sirmx_edition | Records whether the session is a personal or an organisation account, so sign-in lands on the right surface. It carries no credential. | 24 hours | Yes — it carries no credential |
breno_consent | Remembers the choice you make in the notice, so you are not asked again. | 180 days | Yes — it carries no credential |
The three session cookies live in the domain that served the page. If this site and the product application are deployed under a common parent domain, the operator may set a shared cookie domain so that signing in here also signs you in there; when that is not configured the cookies stay host-only and the two are signed in separately.
What it does not set
There is no analytics service, no tag manager, no advertising network, no session-replay tool and no third-party embed, with one exception: the map on the contact page is not loaded until you press its button. Loading it connects your browser to Google Maps, which may set its own cookies; those are Google’s, they are not set by this site, and they are not set at all if you never load the map. Apart from that, the site loads its fonts and images from its own origin, and its only runtime dependencies are the web framework and the framework's own view library — there is no vendor script in the page. You can confirm all of it from the network panel of your browser's developer tools; nothing here asks you to take our word for it.
Your choice
There is nothing optional on this site today. Every cookie above is strictly necessary — take them away and signing in stops working — which is why the notice offers a choice that currently changes nothing, and says so instead of implying otherwise.
It is still a real choice, recorded and honoured: the moment a non-essential cookie exists it will be listed in the category reserved for it, and it will not be set unless you have allowed it.
Checking your recorded choice…
Storage in your browser
This site writes nothing to localStorage or sessionStorage. The product application does keep some of your own settings and a few one-time notices there — never a credential — and the application’s own cookie notice lists them, because that is the origin that writes them.
Managing them yourself
- Signing out clears all three session cookies immediately.
- Your browser’s own settings will show you every cookie set for this site and let you delete any of them. Deleting the session cookies signs you out; deleting the consent record brings the notice back on your next page load.
- Blocking cookies entirely will stop you from signing in. They are the mechanism by which a session exists, not an add-on, so there is no version of this site that works without them.
Contact
Questions about this notice, or about anything the site stores: contact@breno.ng. If the instance you are using is operated by your own organization, its administrator can answer for any change it has made to what is stored.