Cookie Policy

1. What is a cookie?

A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit a website. Cookies, along with similar technologies (local storage, sessionStorage, web beacons), allow your device to be recognised, technical preferences to be remembered and your session to be secured. Their use is governed in Belgium by Article 129 of the Act of 13 June 2005 on electronic communications, which transposes Article 5(3) of Directive 2002/58/EC ("ePrivacy"), and by Regulation (EU) 2016/679 (GDPR) where they allow indirect identification of a natural person.

2. Cookies and trackers used

Strictly necessary cookies (consent-exempt)

• next-auth.session-token — Keeps your authenticated session active (purpose: security, duration: browser session)
• next-auth.csrf-token — Anti-CSRF token protecting forms and authenticated requests (purpose: security, duration: browser session)
• NEXT_LOCALE — Stores your interface language (purpose: functional, duration: 12 months)
• theme — Stores your light/dark display preference (purpose: functional, duration: 12 months)

Functional local storage

• Test API keys — Stored only in your browser's localStorage to power the API explorer, never transmitted to our servers

3. Retention period

Session cookies (authentication, CSRF) are automatically deleted when you close your browser. Preference cookies (language, theme) have a maximum lifetime of twelve (12) months, in line with the recommendation of the Belgian Data Protection Authority (APD) and guidelines 05/2020 of the European Data Protection Board (EDPB). Upon expiry, your consent — where required — will be requested again.

4. Managing and withdrawing cookies

You may at any time configure your browser to accept, refuse or delete cookies placed on your device: Chrome (Settings › Privacy and security), Firefox (Settings › Privacy & Security), Safari (Preferences › Privacy) or Edge (Settings › Cookies and site permissions). You may also browse in private/incognito mode to disable persistent storage. Please note that disabling strictly necessary cookies will make it impossible to log in to your account and use the API; this is solely your responsibility.

5. Legal basis and consent

In accordance with Article 129 of the Act of 13 June 2005 and Article 5(3) of the ePrivacy Directive, cookies strictly necessary for the provision of a service explicitly requested by the user (authentication, security, load balancing, language preferences) are exempt from prior consent. The functional cookies listed above rely on the legitimate interest of the controller (Article 6.1.f of the GDPR) and on the technical necessity of the service. CompanyBelgium does not set any advertising, profiling or third-party analytics cookies; no consent banner is therefore displayed. Should this policy change, a consent management platform (CMP) compliant with the APD guidelines will be deployed prior to any non-essential cookie being placed.

6. Changes to this policy

This policy may be amended at any time to reflect legal, technical or functional changes to the service. The date of the last update is shown at the top of this page. In the event of substantial changes (such as the introduction of new cookie categories), clear information will be published on the site and, where applicable, new consent will be collected before any placement.

7. Contact and complaint

For any questions regarding this policy or to exercise your rights (access, rectification, erasure, restriction, objection, portability) under the GDPR, contact Espero-Soft Informatiques SRL at info@espero-soft.com, +32 484 711 719, or by mail at Rue de la Colonne 1A, 1080 Molenbeek-Saint-Jean, Belgium. You may also lodge a complaint with the Belgian Data Protection Authority (APD), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, https://www.dataprotectionauthority.be.