Cookie Policy

Who sets them

[OPERATOR NAME], the individual operator of Archilas, established in Spain. Contact hermes@archilas.com. The privacy policy explains the rest of the personal data. If a company is later formed to operate Archilas, it takes over this policy the same way the privacy policy describes.

Essential cookies

These are required to do what you asked. The legal basis is contract or a legitimate interest in keeping the session secure. They are not used for advertising.

• Sign-in session. Set by Auth.js (NextAuth) when you sign in. It keeps the session. Cleared when you sign out.
• archilas_org. Remembers which workspace you have open.
• archilas_integration_state. Short-lived state for an OAuth connection, so the callback matches the request you started. It expires in minutes.
• archilas_cookie_consent. Stores whether you accepted or rejected optional analytics, so we do not ask on every page. This cookie exists only after you choose.

Analytics

Plausible. If NEXT_PUBLIC_PLAUSIBLE_DOMAIN is set, the site loads Plausible’s script. Plausible’s default script does not set a cookie and does not use a persistent identifier. We treat that as cookieless measurement, on the basis of legitimate interest. If that script is not configured, it is not loaded.

Google Analytics. If NEXT_PUBLIC_GA_MEASUREMENT_ID is set, Google Analytics is a non-essential cookie service. It does not load until you press Accept on the banner. Reject, or ignore the banner, and it stays off. You can clear the choice by deleting the archilas_cookie_consent cookie. The basis is consent (ePrivacy and GDPR Art. 6(1)(a)).

If neither variable is set in the deployment you are using, the banner is not shown, because there is no non-essential cookie to accept.

Lemon Squeezy

When you buy a plan, Lemon Squeezy is the merchant of record. Its checkout can set its own cookies under its terms. Those cookies are not set by the Archilas marketing pages.

How to refuse

Use the banner when it is shown. You can also block cookies in the browser. Blocking essential cookies will sign you out and can stop a connector from finishing OAuth.

Questions: hermes@archilas.com.