Cookies and storage on your device

Why you do not get a cookie banner

Consent is required for cookies that are not strictly necessary: analytics, advertising, and anything that follows what you do. We have none of those.

What we do set is needed to make the site work, or records a preference you clicked yourself. Those are exempt from the consent requirement. Showing a consent dialog that does nothing would suggest there is something to choose when there is not.

If anything is ever added that does require consent, it will only be placed after you say yes, and you will be able to withdraw that choice.

The two cookies

• webhelpo-session Holds your session, so you stay signed in and a form does not lose your input halfway through. Not readable by scripts in your browser. Expires after two hours of inactivity.
• XSRF-TOKEN Protects forms against misuse from another website. Without it, every submission would be refused. Expires along with your session.

Both are sent only to our own server and never to third parties.

One preference in your browser

If you switch the site to light or dark, we store that choice under the name theme in your browser's local storage, so the site looks right the next time.

That is not a cookie: it is never sent to our server and we cannot read it. It only exists if you use the switch; leave it on your system setting and nothing is stored. You can remove it by clearing site data in your browser.

What is not there

This was verified by opening every public page in a browser and recording each outgoing request. Not one request went to a server other than ours.

• No Google Analytics or any other statistics package.
• No advertising or tracking pixels.
• No social media buttons or embeds.
• No external fonts; those are served from our own server.
• No third-party scripts.

In the client portal

The same two cookies apply there. The portal also remembers your language choice with your account, so you do not have to set it every time. That is stored in our database, not in your browser.