1. What cookies are
Cookies are small text files a website asks your browser to store and send back on later visits. Similar technologies, such as your browser's session storage, work the same way. Under the Spanish law on information society services (LSSI, art. 22.2) and the EU ePrivacy rules, cookies that are strictly necessary to provide a service you asked for do not need consent.
2. The cookies we set
These are set on ExpirationPilot.com, including the sign-in pages and the upload pages that contacts open from a document request.
| Name | Purpose | Lifetime |
|---|---|---|
expirationpilot-session |
Session cookie. Keeps you signed in as you move between pages and remembers short-lived things such as the message shown after you save. It holds only a random identifier; the session itself is stored, encrypted, on our server. Not readable by scripts on the page. | 2 hours after your last visit |
XSRF-TOKEN |
Security cookie. Holds a token that proves a form was sent from our own pages, which protects you against cross-site request forgery. | 2 hours after your last visit |
remember_web_… |
Set only when you tick "Remember me" when signing in. Keeps you signed in on that browser until you log out. Not readable by scripts on the page. | 400 days, or until you log out |
In the app, the Expirations page's search box also stores one short-lived value in your browser's session storage (record-filters:focus), so the cursor stays in the search box when the list reloads. It is deleted as soon as the page has loaded and never leaves your browser.
3. Third parties
- Fonts: our pages load their fonts from Bunny Fonts (BunnyWay d.o.o., Slovenia, EU). Bunny Fonts sets no cookies.
- Cloudflare, which carries every request to the site, may set a strictly necessary security cookie (such as
__cf_bm) when it needs to tell people from automated traffic. It lasts up to 30 minutes and is not used to track you.
There are no analytics, advertising, chat or social media scripts on our pages.
4. How to control cookies
You can delete cookies or block them in your browser's settings. If you block the cookies above, you will not be able to sign in or send forms, including uploading a requested document.
If we ever add a cookie that is not strictly necessary, we will update this page first and ask for your consent before setting it.
5. Questions
Email [email protected]. More about how we handle personal data is in the Privacy Policy.