Igelkott HUB beta — Legal

Cookie Policy

Last updated: 2026-05-23 (v1)  ·  Operator: Igelkott Film AB (org.nr 556998-7794, SE)

This Cookie Policy explains how hub.igelkottplates.com uses cookies and similar local-storage technologies. We use only the minimum set required to operate the Service.

We do not use: third-party advertising cookies, tracking pixels, web-analytics scripts (no Google Analytics, no Plausible, no Matomo), social-media share-trackers, or fingerprinting.

1. What is a cookie?

A cookie is a small text file your browser stores on your device when you visit a website. Cookies allow a site to recognize you across page loads (for example, to keep you signed in).

2. Cookies we set

All three are first-party and classified as strictly necessary under the ePrivacy Directive — they do not require prior consent because the Service cannot function without them.

NamePurposeDurationFlags
session Keeps you signed in after passwordless authentication. Contains a signed session identifier — no personal data is stored in the cookie itself. 24 hours (renews on activity) HttpOnly, Secure, SameSite=Lax
dailies_device Marks this browser/device as a "trusted key" so future sign-ins on a paired computer can be approved by a single QR-scan instead of re-emailing magic links every time. 30 days (sliding window — extended on each use) HttpOnly, Secure, SameSite=Lax
_csrf_token Prevents cross-site request forgery on POST/PATCH/DELETE requests. Until session ends HttpOnly, Secure

3. Local storage

We use localStorage in your browser for two small, non-personal flags:

  • cookie_notice_dismissed — remembers that you've closed the cookie banner so it doesn't reappear.
  • eruda_debug — opt-in developer console overlay, activated only via the ?debug=1 URL parameter.

4. Why no consent banner for these cookies?

Under the ePrivacy Directive (and as implemented in Sweden via the Electronic Communications Act, Lagen om elektronisk kommunikation 2022:482), cookies that are strictly necessary for a service you have requested do not require prior consent. All cookies above fall into that category — without them you cannot stay signed in or protect your session. We display a brief notice the first time you visit, but no consent is sought because none can be refused without blocking authentication entirely.

5. Third-party connections (not cookies)

Some pages embed external static assets that may set their own cookies or receive your IP address when loaded:

  • jsDelivr CDN — serves the Three.js library used by the 360° video viewer. Receives your IP and user-agent on pages that render the viewer.
  • Google Maps API — when map components are visible, the API may set its own cookies. We proxy map requests server-side where possible to limit data flow.

6. Managing cookies

You can delete cookies through your browser settings, but doing so will sign you out of the Service. Re-signing in will re-set the cookies described above.

7. Changes

If we add, remove, or change the purpose of any cookie, we will update this page. Material changes affecting operator workflow will be communicated by email.

8. Contact

Igelkott Film AB
Org.nr 556998-7794 · VAT SE556998779401
Email: sales@igelkottplates.com