Legal information

Cookie policy

Last updated: 28 September 2026

The portal uses only cookies that are strictly necessary for authentication and request security. It does not use advertising, analytics, personalisation, or social-media tracking cookies, so there is no non-essential cookie banner.

Cookies in use

cw_session or __Host-cw_session: keeps an authenticated staff session. It is HTTP-only, uses SameSite protection, and expires automatically.
XSRF-TOKEN: protects state-changing requests against cross-site request forgery. JavaScript must be able to read this token so it can be returned in the request header.

Local storage

The portal does not persist analytics or tracking identifiers in local storage. Your light or dark theme choice is saved on this device under carwashers_theme. Announcement read state is kept only in memory for the current page session.

Third parties

The login page loads scripts and styles from this portal's own origin. It does not load Google Fonts, public CDN scripts, tracking pixels, or third-party embeds. External staff links are opened only after a user selects them.

Managing cookies

You can delete portal cookies through browser settings. Blocking necessary cookies will prevent sign-in or secure state-changing actions. If non-essential technologies are added later, they must remain disabled until a valid choice is obtained and this policy is updated.