What we store
Authentication session, CSRF token, chosen language,
and your cookie acknowledgement. Nothing else.
Legal basis
Essential cookies rely on legitimate interest under
GDPR Art. 6(1)(f); strict opt-in is not required by
ePrivacy Directive Art. 5(3) because these cookies
are strictly necessary for the service to work.
Retention
Session cookies are cleared when you close the browser.
Persistent cookies (language preference, cookie
acknowledgement) expire after up to 12 months.
Third parties
No third-party analytics, advertising, or tracking
cookies are placed by REVATI. If this ever changes,
we will ask for your explicit consent first.
Your rights
Under GDPR you can request access, correction, or
deletion of your data, and you can file a complaint
with your local supervisory authority.