1.Definition
Cookies are small files that a website stores in the user’s browser to remember information between visits. Local storage (localStorage) performs a similar function, although its data is not transmitted to the server.
2.Legal basis
All cookies used by the Platform are strictly necessary to provide the service requested by the User (keeping the session, remembering preferences and protecting forms), so they do not require prior consent.
Any other cookie would require the user’s prior, informed and freely given consent, which could be withdrawn as easily as it was given. The Platform currently uses no cookies of that kind.
3.Cookies used
| Cookie type | Purpose | Duration |
|---|---|---|
| Session | Securely maintaining the signed-in session. | 30 days |
| Form protection | Protecting sign-in forms against cross-site request forgery (CSRF). | Browser session |
| Return after sign-in | Remembering the destination page after sign-in. | Browser session |
| Sign in with Google | Securely completing access with a Google account. | 15 minutes |
| Language | Remembering the chosen language. | 1 year |
| Time zone | Keeping the time zone so the day and cycles match the User’s clock. | 1 year |
| Shared Reading access | Allowing access to a shared Reading after its password is entered. | Until the link expires (max. 24 hours) |
Session
- Purpose
- Securely maintaining the signed-in session.
- Duration
- 30 days
Form protection
- Purpose
- Protecting sign-in forms against cross-site request forgery (CSRF).
- Duration
- Browser session
Return after sign-in
- Purpose
- Remembering the destination page after sign-in.
- Duration
- Browser session
Sign in with Google
- Purpose
- Securely completing access with a Google account.
- Duration
- 15 minutes
Language
- Purpose
- Remembering the chosen language.
- Duration
- 1 year
Time zone
- Purpose
- Keeping the time zone so the day and cycles match the User’s clock.
- Duration
- 1 year
Shared Reading access
- Purpose
- Allowing access to a shared Reading after its password is entered.
- Duration
- Until the link expires (max. 24 hours)
All are first-party technical cookies on the soniaoracle.com domain, and the browser only sends them over encrypted connections. The Provider’s internal admin panel also uses session cookies exclusive to its personnel, which do not affect Users.
4.Local storage
The browser keeps certain interface preferences in local storage that are not transmitted to the server: light or dark theme, visual effects, reading voice, notices already closed and the loaded app version. They can be cleared from the browser settings.
5.Cookieless audience measurement
The Platform uses an audience and performance measurement tool that does not set cookies or persistent identifiers on the device and provides only aggregated data (page views, country, device type and referring page). This data is not used to identify users.
6.Third-party cookies
Stripe’s checkout page and Google’s sign-in page, to which the User is redirected when paying or signing in with Google, may set their own cookies, for example for fraud prevention. Those cookies are governed by the policies of those entities.
7.Management and deletion
The User can view and delete cookies from their browser settings (Chrome, Safari, Firefox, Edge or others). Blocking necessary cookies will prevent signing in and keeping the chosen language, without affecting access to the Library.
Should non-necessary cookies be introduced in the future, the User’s prior consent will be requested through a clear notice allowing them to be rejected as easily as accepted, and this Policy will be updated.