Cookies are small pieces of text that the website stores in your browser. This application uses a minimal set of cookies, in accordance with Regulation (EU) 2016/679 (GDPR). The cookies used and the data stored locally in your browser are detailed below.
| Type | Name | Provider | Purpose | Expiration |
|---|---|---|---|---|
| Strictly necessary | aca_session | ACADEMICS | Maintains the authentication session for server-side rendering (SSR). | 8 hours / 30 days (trusted device) |
| Strictly necessary | aca_trust | ACADEMICS | Remembers whether the device is trusted (sets the session lifetime). | 8 hours / 30 days (trusted device) |
| Strictly necessary | _csrf | ACADEMICS | Token for protection against CSRF attacks. | session (until the browser is closed) |
| Strictly necessary | aca_support_session | ACADEMICS | Keeps the technical-support session used when an administrator assists in a user’s account. | 8 hours / 30 days (trusted device) |
| Error monitoring | Sentry | Scream | Reporting the application's technical errors, for diagnostics. It uses no cookies and carries no personal data (no IP address, form content or credentials). Reports pass through the application's own server to the monitoring service. Legal basis: the operator's legitimate interest in keeping the service working and secure (GDPR art. 6(1)(f)); no advertising or tracking purpose. | on error occurrence |
| Type | Storage key | Purpose |
|---|---|---|
| localStorage | auth | Preferences and session identifier (language, font size, trusted device). |
| localStorage | cnatdcu | Remembers the selected CNATDCU commission (UI convenience). |
| Cookie | periods | Remembers the reporting period last chosen in each module (CNATDCU, FRACS, CNFIS, SDI, SIMAC), so that the pages return to it (UI convenience); removed when the browser is closed. |
| sessionStorage | aca_cache_* | Temporary cache for schemas, dictionaries and reference data; cleared when the tab is closed. |
| sessionStorage | oauth_* | Temporary values for the external authentication flow (anti-CSRF / PKCE); removed after login. |
| sessionStorage | aca_update_autoreload_at | Time of the last automatic reload after an app update, so it is not repeated in a loop; removed when the tab is closed. |
| sessionStorage | aca_chunk_reloaded_at | Time of the last reload after a missing app file (after an update), so it is not repeated in a loop; removed when the tab is closed. |
| Service worker | sw.js | A temporary service worker removes the caches left by the previous version of the app, then removes itself. It stores no data. |
| Notification | Notification permission | Notification permission, requested only on the Tools page (server monitoring), to announce when a server stops responding; can be revoked in the browser settings. |
You can control and delete cookies from your browser settings:
You have the right of access, rectification, erasure, restriction, portability and objection regarding your data. To exercise these rights, contact the Data Protection Officer.
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).
Data processing complies with Regulation (EU) 2016/679 (GDPR). We recommend reviewing this policy periodically for updates.