Cookie Policy
Last updated: 20 August 2026
This cookie policy explains which cookies and similar storage techniques we use on our website, for what purpose, and how long they are kept. It accompanies our privacy policy, in which we describe more broadly how we handle personal data.
What are cookies and storage techniques?
Cookies are small text files that a website places on your device when you visit it. In addition, browsers use similar techniques such as localStorage, which lets a website store information in your browser. We use these techniques for two types of purposes:
- Functional and necessary: needed to make the website and the app work and to remember your preferences. No consent is required for this.
- Analytical: to measure how our website is used so that we can improve it. We only place these with your consent.
We do not use advertising or tracking cookies to follow you across different websites, and we do not sell data.
Which cookies and techniques do we use?
| Name / technology | Purpose | Type | Retention | Party |
|---|---|---|---|---|
| Login session cookie (HttpOnly JWT) | Keeps you logged in during your session and secures access to your account. | Functional (necessary) | Session up to a few hours; expires on logout or when it lapses. | OurDigitalContract |
| odc-cookie-consent (localStorage) | Remembers your choice on the cookie bar (accept or decline), so we do not ask again every time. | Functional (necessary) | Kept until you clear it or withdraw your consent. | OurDigitalContract |
| Preferences and operation (localStorage, for example language and display preferences) | Stores preferences and data needed for the app to work. | Functional (necessary) | Kept until you clear your browser storage. | OurDigitalContract |
| Own page-view counter (no cookie, nothing stored in your browser) | Counts on our own server how often a page is viewed, which website you came from (the host name only, never your search query) and whether your screen is narrow or wide. To count visitors without a cookie, the server turns your IP address and browser string into a key using a secret that changes every day; the IP address itself is not stored and today's key cannot be linked to yesterday's. | Statistics without a cookie (no consent required) | The counts are kept (they contain nothing personal); the daily key is deleted after 90 days. | OurDigitalContract |
| Google Tag Manager and Google Analytics (GTM-M6S43ZPB, with Consent Mode v2) | Measures how the website is used in order to improve it. By default consent is set to denied; no analytical cookies are placed until you give consent. | Analytical (consent required) | Cookie lifetime: _ga up to 2 years, _gid 24 hours. Google keeps the measurement data for up to roughly 14 months. | Google Ireland Limited |
Analytical measurement runs through Google Tag Manager and Google Analytics with Google Consent Mode v2. Google Tag Manager loads with Consent Mode; by default analytical consent is set to denied, so no analytical cookies are placed until you click "Accept" on the cookie bar. Declining analytical (optional) cookies has no effect on your access to or the functioning of the site. If you consent only to analytics, we enable analytical consent only and advertising and personalisation signals stay off. For more on how Google processes data, read the Google privacy policy. We never use these measurement services on the secured app and signing pages.
Separately from that, we count page views on our own server. This sets no cookie and reads or writes nothing on your device, so it falls outside the consent requirement of article 11.7a of the Dutch Telecommunications Act and keeps working if you decline analytical cookies. We only keep the path of the page, the host name of the site you came from, whether your screen is narrow or wide, and a counter. Your IP address is used in working memory only, to derive a daily key that lets us count visitors; the address itself is not stored and the key is deleted after 90 days. The legal basis is our legitimate interest in simple, privacy-friendly visit statistics (article 6(1)(f) GDPR). The data stays on our own server in the Netherlands and is not shared with any other party.
Withdraw or change your consent
You can change your choice at any time. With the button below we clear your stored choice and the cookie bar appears again, so you can choose again between accepting and declining.
You can also always remove placed cookies and storage yourself through your browser settings. Analytical cookies are never placed as long as you do not give consent. Withdrawing your consent does not, in accordance with Article 7(3) GDPR, affect the lawfulness of processing based on consent before its withdrawal; withdrawal therefore only takes effect going forward and processing already carried out remains lawful.
Do you have questions about cookies or want to exercise your privacy rights? You will find the contact details of the data controller in our privacy policy. You also always have the right to lodge a complaint with a supervisory authority, such as the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes to this policy
We may amend this cookie policy, for example when we start using new techniques. The current version is always available on this page. For the broader explanation of personal data we refer to our privacy policy.