Cookie Policy

Last updated: 2026-10-01 · Version 3

This policy explains which cookies and similar technologies our service uses, what for, and for how long. You can read more about your personal data in our privacy statement.

In short

We use only functional cookies that are strictly necessary to let you sign in and keep the service working. We use no analytics, tracking, or advertising cookies. Under article 11.7a of the Dutch Telecommunications Act, functional cookies need no consent; we therefore do not ask for it and show an informational notice only.

Cookies we set

Name	Purpose	Duration	Type
access_token	Keeping you signed in (session carrying your role and language). Readable by the server only (HttpOnly, Secure).	Limited session length (a few hours, depending on your role)	Functional, strictly necessary
mfa_pending_token	Intermediate step while signing in with two-factor authentication (authenticator app).	5 minutes	Functional, strictly necessary
otp_pending_token	Intermediate step while signing in with an e-mailed code.	5 minutes	Functional, strictly necessary
active_customer	Remembers which customer an administrator selected. Administrators only.	24 hours	Functional

Local storage in your browser

Besides cookies we store a few preferences in your browser's local storage (localStorage). These are not sent to us:

• eap.opt.collapsed — remembers which panels an administrator collapsed.
• eap.cookie_notice.ack — remembers that you dismissed the cookie notice.

External resources

To display the pages we load a few files from third parties. That party technically receives your IP address and browser details (user-agent). This is based on legitimate interest (article 6.1.f GDPR): without these files we cannot display the service. No profiling takes place and we do not use these files to track you.

• Font Awesome (icons) via cdnjs.cloudflare.com — Cloudflare, Inc.
• Plotly (charts) via cdn.jsdelivr.net — jsDelivr.

The Inter typeface is loaded from our own server; no external party is involved.

Managing or deleting cookies

You can delete or block cookies at any time in your browser settings. Note that if you block the access_token, mfa_pending_token, or otp_pending_token cookies, you will not be able to sign in.

Contact

Questions about this policy? Contact Ideas at Work b.v. at info@ideasatwork.nl.