Cookies are small text files stored on your device when you visit a website. They can be read by your browser and sent back to the website on subsequent visits. Cookies help websites function properly and remember settings during your visit.

Cookies differ by storage duration and purpose:

• Session cookies are stored only during your visit and are deleted when you close your browser or the session ends.
• Persistent cookies remain stored for a defined period after you close your browser.

Strictly necessary cookies are required for the operation of the website and application. Functional, analytics, or marketing cookies serve additional purposes and may only be set after your consent where required by law.

NEXT_LOCALE (first-party, Silvertip IT-Solutions GmbH)

• Purpose: Stores your selected language for the website (next-intl).
• Storage duration: Session cookie; deleted when you close your browser.
• Legal basis: § 165 para. 3 TKG 2021 (strictly necessary cookie) and Art. 6 para. 1 lit. f GDPR (legitimate interest in providing the website in your chosen language).

jidai_recaptcha_consent (first-party, Silvertip IT-Solutions GmbH)

• Purpose: Stores your Google reCAPTCHA consent decision (granted or denied) so the banner is not shown on every visit and protected forms respect your choice.
• Storage duration: Approximately 6 months (180 days).
• Legal basis: § 165 para. 3 TKG 2021 (strictly necessary storage to implement and document your consent decision) and Art. 6 para. 1 lit. f GDPR.

refresh_token (first-party, Silvertip IT-Solutions GmbH)

• Purpose: HttpOnly cookie containing an opaque refresh token to maintain your authenticated session. Path: /api/v1/auth; SameSite=Strict.
• Storage duration: Until the absolute refresh lifetime expires (default: 14 days), or earlier on logout or session end.
• Legal basis: § 165 para. 3 TKG 2021 (strictly necessary authentication cookie) and Art. 6 para. 1 lit. b GDPR (performance of a contract) or Art. 6 para. 1 lit. f GDPR.

Google reCAPTCHA v3 (data processor: Google Ireland Limited / Google LLC) — used on public-facing forms such as login, Google sign-in, registration, password reset, resend verification, invite requests, and organization registration:

• Cookies / storage: May include cookies such as _GRECAPTCHA and related identifiers set by Google when the reCAPTCHA script is loaded after your consent.
• Purpose: Bot and abuse detection to protect public forms and our infrastructure.
• Storage duration: Determined by Google and may include session and persistent cookies.
• Legal basis: Art. 6 para. 1 lit. a GDPR (consent via our cookie banner). You may withdraw consent at any time via the manage-consent option on protected forms.

The reCAPTCHA script is loaded only after you consent. Once you have consented, it may also run in the background across jidAI during your browser session to support abuse detection and risk scoring, including on pages without a protected form. Without consent, no reCAPTCHA data is transmitted to Google.

We use a consent banner for reCAPTCHA and any future optional cookies. If we introduce analytics or marketing cookies in the future, we will update this policy and obtain consent where required.

jidAI also uses browser local storage and session storage for technical functions. These are not cookies but are mentioned here for transparency:

• jidai-theme (localStorage): Stores your light/dark theme preference.
• jidai-last-activity (sessionStorage): Tracks recent activity for session idle timeout warnings.
• onboarding-preview-{orgId} (sessionStorage): Temporarily stores an onboarding preview draft for the respective organization during your browser session.
• onboarding-deferred-{orgId} (sessionStorage): Records that onboarding was deferred for the respective organization in this session.

When you visit protected forms, our banner informs you about Google reCAPTCHA. You can grant or deny consent there. If you grant consent, reCAPTCHA may remain active in the background across jidAI for the rest of your browser session unless you withdraw consent. Your decision is stored in the jidai_recaptcha_consent cookie.

You may withdraw consent at any time with effect for the future, or grant it later, by using the manage-consent option on protected forms or by deleting website data (including the jidai_recaptcha_consent cookie) in your browser. After withdrawal, reCAPTCHA is no longer loaded again; depending on the page state, this may take effect after a page reload. The lawfulness of processing carried out before withdrawal remains unaffected.

Without reCAPTCHA consent, protected forms cannot be submitted.

You can control cookie storage through your browser settings. Most browsers let you block cookies generally or for specific sites, delete existing cookies, or receive a notification before a cookie is set.

If you disable strictly necessary cookies such as NEXT_LOCALE, jidai_recaptcha_consent, or refresh_token, language preferences, consent remembering, or sign-in may not work correctly.

For more information on how we process personal data and your rights, please see our Privacy Policy. If you have questions about cookies, contact us at info@silvertip-it.at.