cookie policy

1. what are cookies?

cookies are small text files stored on your device when you visit our website. they help websites function properly and provide information about usage patterns.

similar technologies include:

• local storage: browser storage for user preferences
• session storage: temporary storage during your visit
• browser databases: for offline functionality

2. how we use cookies & similar technologies

we use cookies and similar technologies to enhance your experience and make aerraflow work better for you. we categorize them as follows:

3. essential cookies & storage (always active)

these cookies and storage technologies are necessary for the website to function and cannot be disabled:

• authentication: keeping you logged in securely
• security: csrf protection and security measures
• session management: maintaining your session state
• consent management: remembering your cookie preferences
• navigation: preserving scroll positions and form data

essential cookies & storage we use:

legal basis: necessary for contract performance and legitimate interest

note: sveltekit storage is built into the framework and required for proper navigation functionality.

4. analytics cookies (privacy-focused)

we use self-hosted analytics (plausible) that:

• does not share data with third parties
• does not track personal information or ip addresses
• keeps all data on eu servers
• is 100% gdpr compliant
• provides no cross-site or cross-device tracking
• uses daily-rotating anonymous identifiers

legal basis: legitimate interest for website improvement

retention: data anonymized after 24 hours

your control: you can opt out via our cookie banner

5. functional cookies

these enhance your experience but are not essential. note: these are currently not implemented.

6. what we don't use

we explicitly do not use:

• ❌ advertising or marketing cookies
• ❌ cross-site tracking
• ❌ social media tracking pixels
• ❌ third-party analytics (like google analytics)
• ❌ behavioral profiling
• ❌ retargeting or remarketing

7. managing your cookie preferences

7.1 via our cookie banner

when you first visit our site, you can choose:

• essential cookies only: minimum required for functionality
• accept all cookies & tech: full experience with analytics and preferences

you can change your choice anytime via the privacy settings page.

7.2 via browser settings

note: blocking essential cookies may affect website functionality.

8. cookie retention periods

• session cookies: deleted when browser closes
• authentication cookies: 30 days (or until logout)
• preference cookies: 1 year
• functional cookies: 1 year or until cleared (when implemented)

9. data security

all cookies and stored data are protected with:

• secure transmission (https)
• httponly flags where applicable
• secure flags for sensitive cookies
• samesite restrictions
• regular security audits

10. updates to this policy

we may update this cookie policy to reflect:

• changes in our cookie usage
• new legal requirements
• improvements to our services

significant changes will be communicated via email or website notice.

11. contact us

for questions about our use of cookies:

see our privacy policy for information about other data processing activities.