OrlikaCookie Policy
Which cookies the Orlika website and application use, why, and how to control them.
1.What cookies are
Cookies are small text records that a website stores in a visitor's browser and receives back on subsequent requests. Among other things, they make it unnecessary to ask for a password on every page.
Alongside cookies, browsers provide local storage (localStorage) — data kept in the browser and never sent to the server. This Policy covers both.
2.Which cookies are used
All the cookies listed below are strictly necessary: without them signing in and running the application are impossible. All of them are set by the service itself; there are no third-party cookies.
| Name | Purpose | Retention |
|---|---|---|
accessToken | access token: confirms that a request comes from a signed-in user. Not available to page scripts (HttpOnly flag) | up to 7 days; the token itself is valid for 2 days |
refreshToken | refresh token: allows the session to be extended without re-entering the password. Not available to page scripts (HttpOnly flag) | up to 7 days; the token itself is valid for 14 days |
sessionId | session identifier: ties together the requests of one sign-in and allows the session to be ended on sign-out or when suspicious activity is detected | up to 7 days |
Cookies are transmitted only over a secure connection, carry the SameSite=Lax attribute and, as noted above, are unavailable to page scripts. This reduces the risk of their being intercepted or used from another site.
One entry is kept in the browser’s local storage:
| Key | Purpose | Retention |
|---|---|---|
policy-accepted-key | a flag that the cookie notice has already been shown and dismissed. Never sent to the server | until the user clears their browser data |
3.What is absent
This list is given because the absence of trackers is a material fact, and a visitor can verify it only by taking our word for it or by using the browser's developer tools (the latter is preferable).
- no advertising cookies and no advertising pixels;
- no web analytics systems and no visitor counters;
- no social network widgets or buttons that set their own cookies;
- no third-party cookies: every record listed above is set by the domains https://orlika.net and https://app.orlika.net;
- cookies are not used to build a visitor profile, to track a visitor across other sites or to serve advertising.
4.Legal basis
Strictly necessary cookies are set in order to deliver a service the user has expressly requested — signing in and maintaining a session. Without them the service is technically impossible.
Because no cookies requiring separate consent — advertising or analytics — are used, no mechanism for selecting individual categories is provided: there is nothing to choose between. The notice on the website is informational. Should analytics or advertising cookies be introduced, a mechanism for obtaining prior consent will be added and this Policy updated.
5.How to manage cookies
You may block the storage of cookies in your browser settings and delete records already stored. The relevant settings section is usually called "Privacy and security" or "Cookies and site data".
The policy-accepted-key entry is removed together with site data through the browser; once it is removed, the cookie notice will be shown again.
6.Contact and changes
Questions about cookies may be sent to info@orlika.net.
The processing of personal data, including the technical data in the security log, is described in the Personal Data Processing Policy.
This Policy may change. The number and date of the current version are shown at the top of the document.