Last updated 2026

Cookie policy

This application uses only the cookies required to operate. There is no advertising or analytics tracker in the codebase.

Template, not legal advice

This document is a starting template for an operator running this software. It describes what the application actually does, but it has not been reviewed by a lawyer and it does not establish compliance with GDPR, CCPA or any other regime. Have it reviewed before you rely on it.

Essential cookies

These cannot be disabled because the application does not work without them:

rosasis_session — an opaque session token for your sign-in; the database stores its hash. HTTP-only, SameSite=Lax.
rosasis_oauth_state_* — short-lived CSRF protection during a Gmail or Microsoft connection.

Preference cookies

rosasis_locale and rosasis_theme remember your language and light/dark choice so the page renders correctly on the first paint. You can change them at any time in the header or the account page.

No tracking

There are no third-party analytics, advertising or social cookies in this build. If an operator adds one, they must update this page and their consent flow.