Cookies

This notice applies from 16th November 2026. It explains the cookies and similar technologies Dittabase uses. It should be read with our privacy notice.

Our approach

Dittabase uses only the cookies and storage that are needed to sign you in, keep you signed in, protect the site, and remember a setting you have chosen. We do not use analytics, advertising or tracking cookies, and we do not allow third parties to place such cookies through our site.

Under the Privacy and Electronic Communications Regulations 2003 (PECR), a site must ask for consent before storing or reading information on your device, unless doing so is strictly necessary to provide a service you have asked for. Everything listed below falls within that exemption, which is why the site does not show a cookie consent banner.

Cookies set by Dittabase

calderdata

• Purpose: keeps you signed in. It holds your account's email address, an expiry time and a cryptographic signature, so that it cannot be forged. It is marked HttpOnly, so scripts on the page cannot read it, and is sent only over secure connections.
• Duration: 30 days from when you sign in, or until you sign out.
• Strictly necessary: yes.

calderdata_google

• Purpose: used only while you sign in with Google, to check that the reply from Google belongs to the sign-in you started (it holds a random state value and nonce, and the page to return you to). This protects against forged sign-in requests.
• Duration: 10 minutes, and deleted as soon as sign-in finishes.
• Strictly necessary: yes.

calderdata_as_free

• Purpose: set only if you are a Full member and choose, on your Account page, to see the site as a Free member does. It remembers that choice.
• Duration: until you switch the preview off or close your browser, whichever comes first.
• Strictly necessary: yes, as it remembers a setting you have expressly asked for.

Cookies and storage set by Cloudflare

Cloudflare carries all traffic to Dittabase and protects it from attacks and automated abuse.

__cf_bm and similar security cookies

• Purpose: Cloudflare's bot management may set this cookie to distinguish people from automated traffic. It does not identify you and is not used for advertising.
• Duration: 30 minutes.
• Strictly necessary: yes, for the security of the service.

Cloudflare Turnstile

• Purpose: when you sign in or sign up, Cloudflare Turnstile checks that you are a person rather than a robot. To do this it runs a script from Cloudflare and may use cookies or browser storage for the challenge.
• Duration: for the challenge only, or as Cloudflare sets.
• Strictly necessary: yes, for the security of sign-in.

See Cloudflare's cookie policy for details of the cookies it may set.

Other technologies

The offline page and icons

Dittabase can be added to a phone's home screen. To make this work, a small script called a service worker keeps a copy of an offline page and the site's icons in your browser's storage, so that a page can be shown when you have no connection. It does not store any company data, any page you have visited, or anything about you. It stays until you remove the site from your browser's storage.

• Strictly necessary: yes, as part of the app you have chosen to install or use.

Fonts and scripts loaded from other sites

Our pages load a typeface from Google Fonts, and the filings reader loads a script (pdf.js) from cdnjs, which is run by Cloudflare. When your browser fetches these, it sends your IP address to Google or Cloudflare, as any request to a website does. We do not ask these providers to set cookies, and they are not used to track you on our behalf. [[ACTION: we intend to serve these files from our own server, after which this section can be removed.]]

Managing cookies

You can block or delete cookies in your browser's settings. If you block the cookies above, you will not be able to sign in.

If this changes

If we ever add analytics or any other cookie that is not strictly necessary, we will update this notice first and will ask for your consent before setting it, giving you an equal choice to refuse, unless the law then allows such a cookie without consent; in that case we will tell you about it clearly and give you a simple way to object.

Contact

Questions about this notice can be sent to [[CONTACT EMAIL]].