Cookie policy

The public site sets no cookies

quickiso.app and its language versions set no cookies at all. They load no third party scripts, no third party fonts, no advertising pixels and no analytics product. There is no consent banner because there is nothing to consent to, and a banner asking permission for nothing would be theatre.

Visits are counted on our own server without a cookie. Each page load records the page address, its language, the message variant, the domain of the referring site and the campaign tag, together with a visitor identifier derived from the visiting address and a salt that exists only in memory and is replaced every day. The salt is never written down, so yesterday's identifiers cannot be linked to today's, and none of them can be turned back into an address.

The application sets five, all strictly necessary

Signing in requires cookies. These five are necessary to provide a service you asked for, which is the exception in article 400 of the Polish Electronic Communications Law, so they do not require consent. Refusing them means you cannot sign in.

qi_session and qi_sso are Lax because they must come back with a link from another site: the link in an email for the first, and the provider sending you back after you signed in there for the second. The others never need to.

All five:

• are HttpOnly, so page scripts cannot read them;
• are host-only, with no Domain attribute, so they are never sent to a subdomain;
• carry the __Host- prefix and the Secure flag over https, which means a browser will refuse the cookie if either of those conditions is not met;
• are set with Path=/ and expire on their own.

Signing out deletes the session cookie immediately.

Browser storage

The application stores your interface theme (light or dark) in your browser's local storage. It never leaves your device and reaches no server.

The small calculation your browser solves before an email sign up, described in the privacy policy, runs in the page's memory and stores nothing.

The mobile app

The QuickISO app for iPhone and Android uses no cookies. What it keeps on the phone, your sign in and any answer waiting to be sent, is described in section 3.6 of the privacy policy.

Third parties

None set cookies through QuickISO. Cloudflare sits in front of the service as a network provider; it may set a cookie of its own for security purposes on its own responsibility.

When you choose to sign in with Google, your browser goes to Google's own page, and any cookie it sets there is Google's, under its own policy. QuickISO's pages load nothing from Google.

Changes

A new cookie, or a change of purpose for an existing one, is published here before it is set.

Questions about this policy go to [email protected].

Version history