Cookie policy

tessio.eu and labs.tessio.eu

No cookies at all. Analytics run on our own EU servers (Umami), which works without cookies, does not follow you across sites and reports only aggregate statistics.

cloud.tessio.eu

One strictly necessary session cookie that keeps you signed in to the dashboard. It exists only while you use the service, carries an opaque token (stored on our side only as a SHA-256 hash) and is not used for tracking. There are no third party cookies and no advertising or analytics cookies.

If you prove your age with a wallet app on the same phone or computer that opened the check, the check page may set one more: __Host-tessio-same-device. It holds a random value for one day, so that the wallet's answer is accepted only in the browser that started the check, which is a security requirement of the protocol. On our side it is stored only as a hash combined with the check, so what we hold cannot connect one check to another. It is never used for anything else.

Why there is no cookie banner

Consent banners are required for cookies that are not strictly necessary. We do not set any, so there is nothing to ask consent for. If that ever changes, this page changes first.