Storing or reading information on your device is governed by § 25 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, called TTDSG until 14 May 2024). § 25 Abs. 1 requires your consent; § 25 Abs. 2 Nr. 2 exempts what is strictly necessary to provide a service you asked for. Any personal data involved is processed under Art. 6 Abs. 1 lit. b DSGVO (keeping you signed in to the product you use) and Art. 6 Abs. 1 lit. f DSGVO (remembering that you closed the cookie notice).
Categories. Necessary (Notwendig): always on, listed below. Analytics (Statistik): not used. Marketing: not used. Because we only use the necessary category, there is nothing to consent to and we do not run a consent manager. If we ever add an optional category, we will ask first, with rejecting as easy as accepting, and load nothing optional before you choose. Browsing goals.ac sets no cookies at all; the two cookies below only exist once you sign in to the product at app.goals.ac.
- authjs.session-token (or __Secure-authjs.session-token on HTTPS), HttpOnly, SameSite=Lax, keeps you signed in. Max-Age 30 days unless your org shortens it.
- active-project, remembers the last project in the product UI. Not HttpOnly.
- goals_ac_cookie_ok, stores that you closed the cookie notice so it does not show again (localStorage, not a cookie, also strictly necessary).