Cookie policy.
This policy explains the cookies and similar technologies used on our marketing site (csplog.io) and the CSP Logger dashboard (app.csplog.io), why we use them, and how you can control them. CSP Logger is operated by Lova Labs (KvK 42103900). For how we handle personal data more broadly, see our Privacy Policy.
1. What cookies are
Cookies are small text files a website stores in your browser. Some are essential for the site to function; others are optional and only used with your consent. We use the minimum necessary, set no advertising cookies, and do no cross-site tracking.
2. Categories we use
- Necessary cookies keep the site working (authentication, security, and remembering your cookie choice). They do not require consent.
- Analytics cookies are optional. They give us aggregate, IP-anonymised usage data so we know which pages help, and they are set only if you accept.
3. Cookies on the marketing site (csplog.io)
| Name | Purpose | Set by | Category | Retention |
|---|---|---|---|---|
cc_cookie | Stores your cookie-consent choice and its version | Consent banner | Necessary | 182 days |
_ga | Distinguishes unique visitors | Google Analytics 4 | Analytics | 2 years |
_ga_WB2W4DT0K0 | Session persistence | Google Analytics 4 | Analytics | 2 years |
Google Analytics 4 is configured with IP anonymisation (anonymize_ip: true). Analytics cookies are set only after you accept them; if you decline (or never choose), no _ga cookies are set.
4. Cookies on the dashboard (app.csplog.io)
| Name | Purpose | Set by | Category | Retention |
|---|---|---|---|---|
csp_dashboard_session | Keeps you signed in | Application (Laravel) | Necessary | Session (or up to 1 year with "remember me") |
XSRF-TOKEN | Cross-site request forgery protection | Application (Laravel) | Necessary | Session |
The dashboard sets no analytics or advertising cookies, only the necessary cookies above.
5. Other data sent to Google (fonts)
The marketing site loads the Inter and JetBrains Mono typefaces. These are self-hosted, so loading a page does not send your IP address to Google for fonts. Where any Google resource is loaded, Google's own privacy policy governs their handling of that data.
6. Managing your choice
- On your first visit, the consent banner lets you accept or reject analytics cookies with equal-weight buttons.
- Afterwards, re-open your preferences from the cookie settings link in the footer.
- If your browser sends a Do Not Track or Global Privacy Control signal, we skip the banner, treat analytics as declined, and set no analytics cookies.
- You can also block or delete cookies in your browser settings.
7. Third-party cookies
The only third party that may set cookies is Google (Google Analytics 4), and only with your consent. See Google's privacy policy for how they process that data. Our full list of third parties is on the sub-processors page.
8. Changes to this policy
If we change which cookies we use, we bump the version of this policy and the consent record, which re-prompts you for a fresh choice. Material changes are noted by the version and date at the top of this page.
9. Contact
Questions about cookies or your data? Email privacy@csplog.io.