Legal
Cookie policy
Which cookies herimap sets, what each one is for, and how long it lasts. There are six, and not one of them is for advertising or analytics.
The short version
herimap sets six cookies. Three keep you signed in and keep the site safe to use; three remember how you chose to read it. We use no analytics, advertising or tracking cookies, no advertising identifiers, and no third-party tag manager.
That is why nothing asks you to accept anything when you arrive. Every cookie described here is either strictly necessary for something you asked the site to do, or set because you changed a setting yourself.
Cookies that keep you signed in
herimap_session holds a random identifier for your signed-in session. The session itself, including any access tokens, stays on our servers; the cookie only points at it. It lasts up to 90 days, and signing out ends it.
csrf_token holds a value your browser sends back to us with every change you make, so that another website cannot make a change in your name. It is removed when you close your browser.
herimap_oidc_retry appears only when a sign-in is interrupted, so that a single retry can complete. It expires after five minutes.
Cookies that remember how you read the site
herimap_locale remembers the language you last read the site in, so that a return visit opens in it. It lasts a year.
herimap_theme remembers whether you chose the light or the dark appearance. It lasts a year, and it is read before the page is drawn so that the site never flashes the wrong one at you.
herimap_basemap remembers which map style you last used. It is removed when you close your browser.
Kept in your browser, never sent to us
A few view preferences are held in your browser's local storage rather than in a cookie, which means they stay on your device and travel with no request: herimap_owner_calendar_filters remembers the filters you last used in the owner calendar, and herimap_editor_toolbar remembers whether you left the text editor's toolbar open.
Other services your browser contacts
Parts of a page load directly from elsewhere: map tiles from OpenStreetMap, CARTO and Esri, and photographs from Wikimedia Commons. Those requests leave your browser rather than our servers, so those services see your IP address. herimap sets no cookie on their behalf and learns nothing about you from them.
If you sign in with a Google or Microsoft account, that provider sets its own cookies on its own sign-in page, under its own policy. Signing in that way gives herimap no continuing access to the account.
How to control them
Your browser can block or delete any of these. Blocking the sign-in cookies will stop you signing in, because the site has no other way of knowing it is still you. Deleting the rest simply returns the language, the appearance and the map style to their defaults.
Signing out removes the session cookie for you. Deleting your account, which you can do yourself from your account page, ends every session you have open.
Changes to this list
This list is part of the software rather than a document kept beside it: a cookie added to the site is added here in the same change. Where a change matters we will say so on the site before it takes effect. For any question about it, write to info@herimap.eu.
This document is published in English, Czech, German, Spanish, French and Italian. Where the versions differ, the English text applies.