Cookie Policy
Effective 4 October 2026
This policy explains which cookies and similar technologies (browser local and session storage) IMO RISK uses and why.
1. Summary
IMO RISK uses only strictly necessary storage: to keep you signed in, to secure the Google sign-in process, and — on the checkout page only — cookies set by our payment provider Stripe to prevent fraud. We use no analytics, advertising or social-media tracking cookies, and fonts are served from our own domain rather than from a third party.
Under Article 5(3) of the ePrivacy Directive and Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications, storage that is strictly necessary to provide a service you request does not require consent. That is why we do not show a cookie banner. If we ever introduce non-essential cookies, we will ask for your consent first.
2. What is stored on your device
| Name | Type / set by | Purpose | Duration |
|---|---|---|---|
__convexAuthJWT_*, __convexAuthRefreshToken_* | Local storage, this site | Keeps you signed in to your account | Until you sign out; session ends after at most 30 days |
__convexAuthOAuthVerifier_*, __convexAuthServerStateFetchTime_*, __convexAuthMutexes | Local / session storage, this site | Secure and coordinate the sign-in process | Minutes; removed after sign-in |
macalyGoogleHandoffVerifier, macalyGooglePopupProof* | Session / local storage, this site | One-time security proof that links the Google sign-in window to this browser | Minutes; removed after sign-in |
__stripe_mid, __stripe_sid | Cookies, Stripe (checkout page only) | Fraud prevention and secure payment processing | 1 year / 30 minutes |
3. Third-party sites
When you choose “Sign in with Google”, you are taken to Google’s sign-in page, where Google’s own cookies and privacy policy apply. When you open a source link in a dossier, the destination website’s policies apply. Stripe’s use of cookies is described in Stripe’s cookie policy.
4. How to control storage
You can clear cookies and site data in your browser settings at any time. Blocking the storage listed above will prevent you from staying signed in or completing a payment. Signing out removes the sign-in tokens from your browser.
5. Contact
Questions about this policy: pa.havlicek@gmail.com. For how we handle personal data generally, see the Privacy Policy.