Legal
Cookie Policy
Last updated: 4 November 2026 · Effective: 4 November 2026
1. What are cookies?
Cookies are small text files that are stored on your device when you visit a website or web application. They allow the application to remember information about your visit — such as whether you are signed in — so that you do not have to re-enter it on every page or every session.
2. How Liceo uses cookies
Liceo uses two kinds of cookies. Strictly necessary cookies keep you signed in, protect forms and remember your cookie choice; they do not need your consent. Analytics cookies from Google Analytics help us see which pages are useful; we only set them if you accept them in the cookie banner. We do not use advertising cookies.
3. Cookies we set
The table below lists every cookie set by Liceo.
| Name | Type | Purpose | Duration | Party |
|---|---|---|---|---|
| next-auth.session-token | Strictly necessary | Maintains your authenticated session. Set when you sign in and removed when you sign out or the session expires. Without this cookie the platform cannot identify you as a signed-in user. | 35 minutes of inactivity; max 30 days if "keep me signed in" is active | First party |
| next-auth.csrf-token | Strictly necessary | Cross-site request forgery (CSRF) protection token. Prevents malicious third-party sites from submitting authenticated requests on your behalf. | Session (cleared on browser close) | First party |
| next-auth.callback-url | Strictly necessary | Stores the URL you were trying to reach before being redirected to the sign-in page, so you can be sent there after a successful login. | Session (cleared on browser close) | First party |
| __Secure-next-auth.session-token | Strictly necessary | Secure variant of the session token used when the application is served over HTTPS (production). Functionally identical to next-auth.session-token — only one of the two will be present depending on the environment. | 35 minutes of inactivity; max 30 days | First party |
| liceo_consent | Strictly necessary | Remembers whether you accepted or rejected analytics cookies, and when, so we do not ask on every page. | 6 months | First party |
| _ga | Analytics (optional) | Set by Google Analytics only after you accept analytics cookies. Distinguishes one visitor from another so we can count visits. | 2 years | Google (third party) |
| _ga_<container-id> | Analytics (optional) | Set by Google Analytics only after you accept analytics cookies. Keeps the state of your visit for reporting. | 2 years | Google (third party) |
The sign-in cookies are HttpOnly (not accessible to JavaScript), Secure(only sent over HTTPS in production), and SameSite=Lax (not sent on cross-site requests). The consent cookie is readable by our own scripts so the site can respect your choice.
4. Analytics
If you accept analytics cookies, we load Google Analytics 4, provided by Google LLC. Google receives information about the pages you visit, your browser and an approximate location derived from your IP address. We use it only to understand which pages help visitors, and we do not use it for advertising. If you reject analytics cookies, the Google Analytics script is never loaded.
We also use Vercel Web Analytics to count page views. It does not set cookies or store anything on your device, and it does not identify you across sites, so it runs whatever you choose in the banner.
5. Do we need your consent?
Under UK PECR, UK GDPR and the EU ePrivacy rules, strictly necessary cookies do not need your consent. Analytics cookies do, so we ask before setting them. The banner offers accept and reject with equal weight, and nothing optional loads until you choose.
You can change your choice at any time with the Cookie settings link in the footer of every page. If you withdraw consent, we stop loading Google Analytics and delete its cookies from your browser. We will ask again if we add a new kind of optional cookie.
6. Managing and deleting cookies
You can view, manage, and delete cookies through your browser settings. Deleting or blocking the session cookies listed in Section 3 will sign you out of Liceo. The steps to manage cookies vary by browser:
7. Changes to this policy
We may update this Cookie Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material we will notify you by email or by a notice within the platform.
8. Contact us
If you have any questions about this Cookie Policy or how we use cookies, please contact us at privacy@liceo.io.