1. What are cookies and local storage?
Cookies are small text files that websites store on your device. Local storage (localStorage) is a modern browser technology that allows websites to store data directly in the browser. Unlike cookies, localStorage data is not automatically sent to the server with every request.
ISOCALCX sets its own strictly necessary cookies for authentication. These are flagged HttpOnly and therefore cannot be read by JavaScript in the browser, which protects your session. We use localStorage solely for user settings such as language selection, display mode and your consent decision, as well as for a display cache of your profile. Neither technology contains executable programs and cannot cause any damage to your device.
2. Which storage technologies do we use?
2.1 Overview of all storage entries
The following tables list all entries that ISOCALCX places in your browser — both our own cookies and localStorage entries. Necessary entries are strictly required for platform operation; statistics entries are only set with your explicit consent.
Necessary storage entries
These entries are stored without consent because they are indispensable for the fulfilment of the contract (login, language selection, storage of your consent decision).
| Key | Type of storage | Purpose | Duration | Category |
|---|---|---|---|---|
| accessToken | Cookie (HttpOnly) | JWT authentication token for secure access | 15 minutes | Necessary |
| refreshToken | Cookie (HttpOnly) | Token for automatic session renewal | 7 days | Necessary |
| isocalcx.cookieConsent | localStorage | Storage of your consent settings | Persistent | Necessary |
| isocalcx.user | localStorage | Profile cache for display (name, email, role) | Persistent | Necessary |
| isocalcx.authUser | localStorage | Sign-in cache (name, email, role, company) — avoids a server round-trip on every page change | Persistent | Necessary |
| isocalcx.currency | localStorage | Selected currency for price display | Persistent | Necessary |
| isocalcx-theme-chosen | localStorage | Remembers whether you chose light/dark mode yourself | Persistent | Necessary |
| isocalcx.sidebar.collapsed | localStorage | Whether the sidebar is expanded or collapsed | Persistent | Necessary |
| isocalcx.pdfViewerVisible | localStorage | Whether the PDF view is shown | Persistent | Necessary |
| isocalcx.pdfSidebarWidth | localStorage | Configured width of the PDF sidebar | Persistent | Necessary |
| isocalcx.locale | localStorage | Active language selection (DE/EN/FR/IT) | Persistent | Necessary |
| isocalcx.locale.userOverride | localStorage | Manual language override by the user | Persistent | Necessary |
| theme | localStorage | UI mode (light/dark) | Persistent | Necessary |
Both authentication cookies are set by the server with the attributes HttpOnly (no access by browser JavaScript, protection against cross-site scripting), SameSite=Lax (protection against cross-site request forgery) and Path=/; over HTTPS they additionally carry the Secure attribute. They contain no passwords. Authentication tokens are not stored in localStorage.
"Persistent" means the data remains stored in the browser until you delete it manually. The authentication cookies are deleted by the server immediately upon logout.
Statistics entries (opt-in)
These entries are only set if you have explicitly consented to the "Error telemetry" category in the cookie banner or in the settings below.
| Key | Type of storage | Purpose | Duration | Category |
|---|
Sentry telemetry is only loaded after your consent (consent gating).
2.2 Error telemetry (Sentry)
We do not use analytics cookies or performance trackers. With your explicit consent we only transmit anonymised error reports to Sentry so that bugs can be fixed faster. No personal data, no inputs and no content are transmitted.
3. Legal basis
The use of local storage and cookies is based on the Swiss Federal Act on Data Protection (FADP, revised as of 1 September 2023):
- Essential storage (cookies and localStorage): The necessary authentication cookies and the localStorage entries are stored on the basis of contract fulfilment (Art. 6 para. 3 FADP). They are strictly necessary for providing platform functionality and do not require separate consent.
- Error telemetry: Sentry error reports are only collected with your explicit consent (Art. 6 para. 6 FADP). You may revoke your consent at any time.
ISOCALCX is subject to the Swiss FADP. Where data of persons from the EEA is concerned, we additionally comply with GDPR requirements. Switzerland has an adequacy decision from the European Commission, confirming an adequate level of data protection.
For B2B use (data processing in the context of your work for a company), our Data Processing Agreement (DPA).
4. Retention periods
The retention period of cookies and localStorage entries varies according to their purpose:
- Authentication data: The access token is valid for 15 minutes and is automatically renewed via the refresh token. The refresh token has a validity period of 7 days. Both are held exclusively in HttpOnly cookies and are deleted immediately upon logout.
- User settings: Language, theme and consent settings are stored persistently and remain until you manually delete them or reset your browser data.
5. Manage and delete stored data
5.1 Consent banner
On your first visit to the platform, you will be informed via a consent banner. There you can choose whether you wish to consent to optional error telemetry (Sentry). You can change these settings at any time via the "Cookie Settings" link in the platform footer.
5.2 Delete stored data
You can delete ISOCALCX's localStorage data via your browser's developer tools. In most browsers, you can access them via F12 -> "Application" -> "Local Storage". The authentication cookies are located in the same place under "Cookies"; the simplest way to remove them is to log out. Alternatively, you can delete the website data via your browser settings:
Note: If you delete ISOCALCX's localStorage data, your language and display settings will be reset and the profile cache will be cleared. You remain logged in for as long as the authentication cookies are valid — log out or additionally delete the cookies to end the session.
5.3 Reset consent
With one click you can reset your consent decision. On the next page load, the cookie banner will reappear and Sentry telemetry will NOT be loaded until you grant new consent.
6. Third-party cookies and telemetry
ISOCALCX sets its own cookies solely for authentication (see section 2.1) — no advertising or tracking cookies. In addition, the following third-party providers may set cookies or telemetry in your browser as part of their services. ISOCALCX does not use third-party cookies for advertising purposes.
- Stripe (necessary): Technically necessary cookies may be set during payment processing to ensure transaction security and prevent fraud. Stripe is only active on payment / checkout pages.
7. Contact
If you have any questions about the use of cookies and local storage on our platform, please contact:
ISOCALCX
Registered office: Aadorf TG, Switzerland
Alban Selimi
Wiesentalstrasse 28, 8355 Aadorf
E-Mail: Kontakt aufnehmen
For more information on how we handle your personal data, please see our Privacy Policy.
8. Cookie Preferences
Manage your preferences per category here. Necessary entries are essential for the operation of the platform and cannot be disabled. We do not use marketing tracking.
Necessary
always onAuthentication (HttpOnly cookies), language and theme settings, and storage of your consent.
Error telemetry
Anonymised error telemetry (Sentry). Loaded only after your consent.
Marketing
not usedISOCALCX does not use any marketing tracking — this category remains disabled.
Your preferences are stored in localStorage under "isocalcx.cookieConsent".