Cookies and local storage
Notice version: 2026-10-15.1
Draft for review. STIROM must complete retention rules and provider details before publishing this version.
Your choice
Strictly necessary cookies and storage support functionality, security and requested preferences. Google Analytics, Google Ads and Meta Pixel scripts are not enabled before consent to the respective category. Browsing, closing a page or scrolling does not constitute consent.
What the website stores
| Name | Purpose | Duration |
|---|---|---|
| stirom_session | Session, forms, CSRF protection and authentication; HttpOnly cookie. | Session cookie; admin sessions expire after 30 minutes idle or 8 hours. |
| stirom-editor-v1|* | Local copies of unsaved content, only in the administrator editor; localStorage. Passwords and CSRF tokens are not stored. | Expires after 7 days; expired copies are removed the next time the editor opens. Copies can also be removed manually. |
| stirom-theme | Requested light/dark theme; localStorage. | Until browser storage is cleared. |
| stirom-consent-v3 | Accepted/rejected categories, version and choice date; localStorage. | 180 days; a version change requires a new choice. |
| stirom-event-* | Avoiding duplicate conversions; sessionStorage, only after consent. | Tab session. |
Optional services
If integrations are enabled and have configured identifiers, Analytics permits Google Analytics, while Advertising permits Google Ads and Meta Pixel. Cookies may include _ga*, _gid, _gat*, _gcl*, _fbp and _fbc. Actual cookies and lifetimes depend on provider configuration; this website does not install them before the relevant consent.
Google Maps does not load automatically. Its load button explains the transfer to Google and requires a separate action. Alternatively, open the address in an external tab.
You can reject optional storage or withdraw consent through Cookie preferences. Forms remain available. On withdrawal, known tracking cookies accessible on this domain are removed and the page reloads. We cannot remove inaccessible cookies on provider domains or data already sent; also use provider controls.