1. What cookies are
Cookies are small files a site stores on your device to make it work or to remember information between visits. Some are strictly necessary: without them the service does not work, and no prior consent is required. Others measure or profile: those need your consent, and we use none.
2. Cookies we use
| Name | Purpose | Category | Lifetime |
|---|---|---|---|
| elite_auth | Keeps your session active after sign-in | Strictly necessary | Until sign-out or session expiry |
| legal_ack | Remembers that the terms in force are settled for you (accepted, or not required for your role), so you are not asked on every page | Strictly necessary | 12 months, 12 hours if you do not have to accept |
| legal_locale | Remembers the language chosen for the legal documents | Preference | 12 months |
| Theme preference | Remembers light or dark appearance (browser local storage, not a cookie sent to the server) | Preference | Until you clear it |
The legal_ack cookie deserves one extra line: it records only the version of the terms you accepted, not your data. The acceptance itself is stored in your account, with date, time and document versions. If you use the dashboard as an employee or contractor of one of our customers, the contract is signed by the administrator of their organisation: we ask you for no signature, and the cookie simply notes that.
3. What we do NOT use
On the public site we use no profiling cookies, no third-party advertising trackers and no session recording. That is why the public site needs no consent banner: there is nothing to consent to.
Inside the application we collect operational diagnostics (errors, response times) tied to the authenticated session rather than to any advertising identifier. They keep the service stable and are described in the privacy notice.
4. External providers
Some features rely on providers that may set strictly necessary technical cookies during use (for example the payment provider during a transaction, for fraud prevention). The full provider list is in the privacy notice.
5. Managing cookies
You can block or delete cookies in your browser settings. Note that disabling the strictly necessary cookies breaks access to the application: they are what keeps you signed in. Deleting legal_ack simply means you will be asked again to acknowledge terms you have already accepted — you do not accept them twice.
6. Changes to this notice
We may update this notice. The date at the top shows the last revision. Questions: privacy@ospitia.it.