Cookie Policy
1. What cookies and similar technologies are
A cookie is a small file a site stores in your browser. Similar technologies include local storage, IndexedDB and the service worker cache that an installed web app uses. This policy covers all of them.
2. Strictly necessary
These cannot be switched off, because the platform cannot work securely without them.
| Name | Purpose | Retention |
|---|---|---|
| Session cookie | Keeps you signed in and keeps form state across requests. | Browser session, or up to the configured session lifetime. |
| CSRF token cookie | Protects forms against cross-site request forgery. | Browser session. |
balde_consent |
Records your cookie choice so you are not asked repeatedly. | 180 days. |
balde_consent_id |
Pseudonymous identifier linking your choice to a stored consent record. | 180 days. |
3. Functional
Optional. Remembers your language preference when you are not signed in. Rejecting this does not break the site: the language simply resets to the default each session.
4. Analytics
Optional. No analytics service is active in this deployment. The category exists so that, if the operator enables one, it is governed by your consent from the start rather than being added without it. While no service is configured, consenting to analytics causes nothing to load.
5. Marketing
Optional. No advertising or marketing technology is used by this platform, and none is planned. The category is listed for completeness and transparency.
6. Browser storage used by the installable app
| Storage | Purpose | Retention |
|---|---|---|
| Service worker cache | Holds the app shell, static assets and public pages already visited, so they work offline. | Until a new app version replaces it, or you clear site data. |
| Offline draft storage | Holds shortage report drafts you explicitly save while offline. | Until you submit or delete the draft, or clear site data. |
Authenticated pages, administrative pages and private API responses are deliberately excluded from the cache. Authentication tokens and personal records are not stored in browser storage. A cached page is never treated as proof that you are signed in, and caching never grants access: every request is authorised again on the server.
Optional scripts are never loaded from the cache in a way that bypasses your consent, and no optional technology loads while offline.
7. Changing your mind
Use the Cookie Preferences link in the footer, available on every page. You can change categories or withdraw optional consent at any time, and withdrawal takes effect immediately. Rejecting every optional category leaves all core functionality working.
If the consent policy changes materially, you will be asked again.
8. Managing cookies in your browser
Every major browser lets you block or delete cookies and clear site data, usually under privacy settings. Blocking strictly necessary cookies will prevent sign-in and form submission from working.