Cookie Policy (draft)

1. What this policy covers

This policy explains the cookies and similar browser storage (local storage, session storage and the offline cache) used on bosla.ccsit.co, including the landing page, sign-in and sign-up pages and the signed-in application, operated by Continuum Consulting Services ("CCSIT", "we"). It does not cover your organisation's own data inside the product, which is described in the Privacy Notice.

2. Your choices

When you first visit you can choose Accept all, Necessary only, or Customise. Strictly necessary items are always on because the service does not work without them. Preferences and performance measurement are off until you allow them. Your choice is saved in a cookie for about six months, after which we ask again. You can change it at any time from "Cookie settings" (in the footer of the landing page, on the sign-in pages, in the account menu, and on this page). Withdrawing consent removes what the category stored; switching a category off never affects the strictly necessary items.

3. Strictly necessary (always on)

Sign-in session cookie (next-auth.session-token, with the prefix __Secure- on HTTPS): keeps you signed in. It lasts until you sign out or your workspace's session limit is reached (12 hours by default).

CSRF cookie (next-auth.csrf-token, with the prefix __Host- on HTTPS) and callback cookie (next-auth.callback-url): protect sign-in against forged requests and return you to the page you asked for. They last for the browser session.

Cookie choice (bosla_consent): remembers what you selected here. It lasts about six months.

Offline support: a service worker and a small cache named compass-v1 let the application show an offline page when your connection drops. It holds no personal data and stays until the cache is cleared or replaced by an update.

AI panel state (session storage, key compass.assistant): remembers whether the assistant panel is open in the current tab. It is deleted when the tab closes.

4. Preferences (only with your consent)

Theme (local storage, key theme): remembers light or dark. Language (cookie compass_locale): remembers your language; it lasts one year if you allow Preferences, otherwise only until you close the browser. Layout (local storage, keys bosla.nav.collapsed and bosla.dashboard.display): remembers collapsed menu groups and dashboard display options.

Without your consent these choices still work during your visit but are forgotten afterwards. If you are signed in, your language choice is also saved in your account settings, which is part of the service you asked for.

5. Performance measurement (only with your consent)

For a sample of visits (about one in five) we send anonymous page-speed measurements (Core Web Vitals: LCP, INP, CLS, FCP, TTFB) with a device class (mobile, tablet or desktop) and the connection type. They contain no user ID, no page address and no personal data, set no cookie, are used only to keep the service fast, and are never shared or used for advertising.

6. Third parties

We do not use advertising or social-media cookies, analytics services run by others, or third-party embeds. Fonts, images and the product demo video are served from our own domain.

7. Browser settings

You can also block or delete cookies and site data in your browser settings. If you block strictly necessary cookies you will not be able to sign in.

8. Changes and contact

We will update this policy when we add or change cookies; if the categories change we will ask for your choice again. Questions: support@ccsit.co.