DOTRAMACookies
Which cookies this site sets and what each one is for.
Draft, pending legal review
This text is a draft. It has not been reviewed by a lawyer, and the operator's details are still missing — they are shown in square brackets. Do not treat it as a final legal document.
Cookies on dotrama.com
Three at most. The first is set for everyone who visits. The other two appear only when you sign in to your account.
dotrama_locale
- purpose: remembers the language you chose
- content: a two-letter language code, nothing else
- lifetime: one year
- type: strictly necessary for the site to work as you asked it to
__Host-dotrama_sign_in
- purpose: carries a sign-in from this site to the sign-in page and back, and protects it from being forged
- set: only when you press “Sign in” or “Create account”
- content: encrypted; only our server can read it
- lifetime: 10 minutes, and it is removed as soon as the sign-in completes
- type: strictly necessary
__Host-dotrama_customer_session
- purpose: keeps you signed in to your account
- set: only after you sign in
- content: a random identifier; your account data and access keys stay on our server, encrypted
- lifetime: up to 180 days; it stops working after 30 days without use, and it is removed when you sign out
- type: strictly necessary
Cookies on auth.dotrama.com
Signing in happens on our own sign-in server at auth.dotrama.com, not at a third party. It sets its own cookies, all strictly necessary:
- AUTH_SESSION_ID, KC_AUTH_SESSION_HASH and KC_RESTART: hold a sign-in that is in progress; they end with it
- KEYCLOAK_IDENTITY and KEYCLOAK_SESSION: remember that you have signed in, so you are not asked for your password again on the same device; they end when you sign out or the sign-in expires
- KEYCLOAK_LOCALE: the language of the sign-in page, only if you change it there
Why there is no cookie banner
European law requires your consent for cookies that are not necessary — analytics, advertising, tracking. Every cookie listed above is needed for something you asked for: the language you chose, or signing in. None of them is used for analytics, advertising or tracking, so there is nothing to ask you about.
The banner you see almost everywhere else exists because those sites do track you. We would rather not need one.
If that ever changes
Should analytics be added later, you will be asked before anything non-essential is set, and you will be able to refuse. The cookies above would keep working either way — none of them tracks you, and your answer does not affect them.