1. What cookies are

Cookies are small text files a website stores in your browser. They are commonly used to keep you signed in, remember preferences, or track behaviour across sites. We use them only for the first two, and never the third.

2. What we set

Every cookie below is first-party, strictly necessary, and set only once you interact with a feature that needs it. Simply reading the marketing pages sets nothing.

Session cookie: issued when you sign in, so the site knows who you are between requests. It is HttpOnly (unreadable by JavaScript), Secure (sent over HTTPS only), and expires after 24 hours. It holds an opaque identifier, not your personal data.
CSRF token cookie: a random value paired with a request header to prove a form submission genuinely came from our site. It is readable by our own JavaScript by design, which is what makes the double-submit check work, and holds no personal data.

3. What we do not set

No advertising or retargeting cookies.
No cross-site or third-party tracking cookies.
No third-party analytics or session-recording scripts.
No social media embeds that would set cookies on our behalf.

4. Why we do not ask for consent

Under the ePrivacy rules and equivalent regimes, cookies that are strictly necessary to deliver a service you have requested, such as keeping you signed in and protecting a form against forgery, do not require prior consent. Because we set nothing beyond that, there is no banner. If that ever changes, we will ask first.

5. Controlling cookies

You can block or delete cookies in your browser settings. Blocking the two cookies above will not affect the public pages, but you will not be able to sign in or submit the contact form, because both depend on them.

6. Changes

If we introduce any new cookie we will update this page and, where the law requires it, ask for your consent before setting it.

7. Contact

Questions about this policy: contact@odonat.ai. See also our Privacy Policy.

Cookies Policy