Cookies
This is a draft. It describes how Beathex works and what this document will need to cover, but the wording has not been settled or reviewed. It does not create any obligation and should not be relied on.
The cookie Beathex sets
One: the refresh token. httpOnly, SameSite=Lax, Secure in production, scoped to the authentication path, and set only after a successful sign-in. Removing it signs you out.
[LEGAL_TEXT_REQUIRED: The cookie Beathex sets]
What Beathex does not set
No analytics cookie, no advertising cookie, no third-party tracker, no fingerprinting. Verified by inspecting the application rather than assumed.
[LEGAL_TEXT_REQUIRED: What Beathex does not set]
Consent
Whether a strictly necessary authentication cookie requires a consent banner is a legal question. No banner is implemented, and one should not be added on a guess.
[LEGAL_TEXT_REQUIRED: Consent]
Contact
A monitored address for questions about this document has not been configured.
[LEGAL_TEXT_REQUIRED: contact address]