Cookies and storage

We set no cookies when you read the public website. Our pages don’t load analytics, advertising, tracking pixels, embedded content, third-party scripts or remote fonts, and they don’t ask our sign-in endpoints for anything.

The only thing the public website can store in your browser is a preference you set yourself: a colour theme or “Reduce motion” (see preferences in local storage). Nothing is stored until you change one of them.

When you sign in and use the dashboard, we use the cookies below. The first three come from Auth.js, the sign-in software we use. All of them are first-party cookies for app.letterpier.com; none of them is shared with anyone else.

Auth.js also knows cookies for PKCE, state and nonce checks. They are used only when signing in through another provider (OAuth), which Letterpier doesn’t offer, so they are never set.

The session is not extended while you use the dashboard: 7 days after signing in, you sign in again with a new code.

Local storage is a small store in your browser that only pages of this site can read. We use it for three preferences. Each is written only when you change the setting, holds a fixed value such as “dark” or “off”, and never leaves your browser: it is not sent to our server.

We use no session storage, IndexedDB, service workers or other browser storage.

Storing and reading these items is strictly necessary to provide the service you asked for: signing in, the dashboard, and the display settings you chose (§ 25(2) No. 2 of the German Telecommunications and Digital Services Data Protection Act, TDDDG). This is why we don’t ask for consent and show no cookie banner: a banner would suggest a choice that doesn’t exist.

Any personal data involved, such as the account details in the session cookie, is processed to provide the dashboard: under our contract where you are our contract partner (Art. 6(1)(b) GDPR); where your organisation is, in our legitimate interest in giving the people our customers name access to their projects (Art. 6(1)(f) GDPR). Keeping accounts secure is also our legitimate interest (Art. 6(1)(f) GDPR). Details are in our privacy policy.

No analytics, advertising or third-party cookies. There is nothing to opt out of.

You can delete cookies and site data in your browser’s settings at any time. If you delete the session cookie, you are signed out. If you delete the preferences, the site goes back to following your system settings.

To remove a preference without clearing everything: choose “System” as the theme (this stores the value “system”, which behaves as if nothing were stored), turn “Reduce motion” off, or turn keyboard shortcuts back on.

If we ever want to store something that isn’t strictly necessary, we will ask for your consent first, and update this page before we do.

Questions about this page: mail@michael-ketzer.com.