Cookie & storage notice
Version 2026-09-11 · effective from that date
This is the complete list of what Verdex places on or reads from your device. There are no advertising cookies, no third-party trackers and no cross-site identifiers. Strictly necessary items work without consent (ePrivacy Directive Art. 5(3)). Analytics runs only if you allow it and only on deployments where our data-protection contact has approved the cookieless analytics vendor; tracker-based analytics is not used at all.
1. Inventory
| Name | Type | Purpose | Lifetime | Category |
|---|---|---|---|---|
| verdex_session | Cookie (HttpOnly, Secure, SameSite=Lax) | Keeps you signed in. Holds a signed session token; contains no readable personal data. | Your login session; deleted on sign-out | Strictly necessary |
| verdex_oidc_session | Cookie (HttpOnly, Secure, SameSite=Lax) | Protects the single-sign-on handshake against forgery (state/nonce). Only when your organisation uses SSO. | Minutes, during login | Strictly necessary |
| verdex.consent | localStorage | Records the choice you make in the cookie banner, with its date. | Until you clear site data or change it | Strictly necessary |
| verdex.reviewer | localStorage | Your reviewer name for watchlist notes, so you need not retype it. | Until cleared | Functional |
| verdex.operator_context | localStorage | Your answers in the recommendations panel (role, commodity), kept on this device only. | Until cleared | Functional |
| verdex.penalty.* | localStorage | Turnover and product-value figures you enter into the penalty-exposure estimator. Never sent to our servers. | Until cleared | Functional |
| verdex.shipment.draft.* | localStorage | Unsaved shipment drafts per analysis, so a page reload does not lose your work. | Until cleared | Functional |
| Plausible Analytics | No cookie, no storage | Aggregate page views (path, referrer, country, device class). Path segments that could identify a job or a supplier link are masked before anything leaves your browser. | n/a — nothing stored on your device | Analytics — only with your consent, and only if this deployment has analytics enabled |
2. Your choice
The banner on your first visit offers “Essential only” and “Allow analytics” with equal weight; nothing is pre-selected and we do not treat scrolling as consent. Change your mind at any time:
You can also block or delete cookies and site data in your browser; the sign-in cookie is required to use your account.
3. Do Not Track / Global Privacy Control
We honour your explicit choice above rather than browser signals, because the signals are not consistently sent. If you send GPC and have not made a choice, analytics stays off — the default is always off until you opt in.
4. Questions
privacy@spatialsusty.com · see also the Privacy policy.