Cookie Policy

Last updated: October 27, 2026

This Cookie Policy explains which cookies the èKeto website may use. The mobile app uses application tokens, not browser cookies, to authenticate users.

What cookies are

Cookies are small text files that a website may store in a browser to maintain a session, protect requests, or remember technical settings.

Strictly necessary cookies

The website uses only technical cookies when needed for operation and security. They do not require prior consent and cannot be used for advertising.

  • _eketo_rails_session: the website session cookie. It holds the CSRF protection token, which prevents fraudulent requests, and, only for administrators who signed in, the account identifier. It is encrypted, sent only over HTTPS, and not readable by scripts. It has no persistent expiry: the browser deletes it when you close it.
  • The CSRF token does not use a separate cookie: it is stored inside _eketo_rails_session and lasts as long as that cookie.
  • CF_AppSession and CF_Authorization: set by Cloudflare Access only on the pages of the administration area (/valhalla), reserved to the controller, to verify access. CF_AppSession lasts 24 hours; CF_Authorization lasts 8 hours from sign-in.
  • The website does not use localStorage, sessionStorage, or other browser storage.

No analytics or marketing cookies

The website does not use analytics or marketing cookies, advertising pixels, or profiling technologies. Therefore, no consent banner is displayed. If optional cookies are introduced later, this policy and the consent mechanism will be updated before activation.

Mobile app

The èKeto app locally stores authentication tokens in secure storage and technical preferences such as onboarding and language. These are not website cookies and are described in the Privacy Policy.

How to manage cookies

You can view, block, or delete cookies in your browser settings. Disabling technical cookies may prevent restricted areas from working, but it does not limit access to public pages.

Changes to this Cookie Policy

We will update this page if the website's cookies or services change. The latest revision date appears above.

Contact

For questions about cookies, email [email protected].