Cookie Policy

These are strictly necessary to provide the service you asked for, or remember a choice you made, so they are set without asking first [counsel to confirm the ePrivacy exemption applies to each]. The sign-in cookies are named with a __Secure- or __Host- prefix on the live site.

• authjs.session-token

  Keeps you signed in. It holds an encrypted session, not your password.

  Lasts: 30 days, renewed while you use the app; removed when you sign out

• authjs.csrf-token

  Protects the sign-in forms against cross-site request forgery.

  Lasts: until you close the browser

• authjs.callback-url

  Remembers which page to return you to after signing in.

  Lasts: until you close the browser

• authjs.pkce.code_verifier, authjs.state

  Set only when you sign in with Google or GitHub, to secure the hand-off between their site and ours.

  Lasts: 15 minutes, only while signing in

• sidebar_state

  Remembers whether you collapsed the sidebar.

  Lasts: 7 days

These are not cookies: they stay in your browser and are not sent to our servers with each request. They hold preferences and work you chose to keep on this device.

• basemap-storage, map-view-storage

  Your chosen basemap and where the map was last pointed.

  Lasts: until you clear site data

• gis-layer-preferences (one per project)

  How you arranged and styled layers.

  Lasts: until you clear site data

• yugen-custom-rois, yugen-recent-rois

  Areas you drew and recently used, kept on this device for quick reuse.

  Lasts: until you clear site data

• admin.activity.timeZone

  Administrators only: the time zone chosen for the activity page.

  Lasts: until you clear site data

• debug

  Present only if diagnostics are switched on for troubleshooting.

  Lasts: until you clear site data

• yugen:stale-chunk-reload-at, yugen:mobile-gate-dismissed

  Session storage: stops a reload loop after an app update, and remembers that you dismissed the small-screen notice.

  Lasts: until you close the tab

Map tiles come from the basemap providers you can pick in the app (Esri, CARTO and OpenFreeMap). Like any web request, loading a tile tells that provider your IP address; we set no cookies for them. If you choose to sign in with Google or GitHub, they set their own cookies on their own sites, under their own policies.

Browser error and performance monitoring (Grafana Faro, listed in our Privacy Policy) is not switched on. If we switch it on, this page will be updated first [and consent requested where the law requires it].

You can block or delete cookies and site data in your browser's settings. Blocking the sign-in cookies will sign you out, and the app cannot be used without them. Clearing site data also removes areas you saved on this device. Signing out removes the session cookie.

Questions: [email protected].