Legal
Cookie Policy
Diese Seite ist nur auf Englisch verfügbar. Der englische Text ist die verbindliche Fassung.
This page lists every cookie and browser-storage item INSIGHTEX sets, what it is for and how long it lasts. Necessary items are always on; analytics and marketing are off until you choose them.
Your choice
You can change your choice at any time. It is remembered in the insightex_cookie_consent cookie for 180 days and asked again if we change what we use.
Necessary (always on)
Required for sign-in, security and remembering your preferences. They are not used for advertising or tracking.
| Name | Purpose | Duration | Type |
|---|---|---|---|
insightex_auth | Keeps you signed in. Set only after you sign in; httpOnly, so scripts cannot read it, and SameSite=Lax, so you stay signed in when you arrive from a link in an email or another site. | 30 days, or until you sign out | First-party cookie |
insightex_challenge | Holds a half-finished sign-in while you enter your two-factor code (no-JavaScript path). | Up to 15 minutes | First-party cookie (httpOnly) |
insightex_device | Recognises a browser you have already verified, for staff accounts. Only a random value, stored hashed on our side. | Up to 400 days | First-party cookie (httpOnly) |
insightex_oauth_binding | Ties a "Continue with Google / LinkedIn" attempt to the browser that started it, to prevent forged sign-ins. | 10 minutes | First-party cookie (httpOnly) |
insightex_session | Set only when you open the link in a newsletter confirmation email: a short server session for that request. It does not sign you in. | 2 hours | First-party cookie (httpOnly) |
XSRF-TOKEN | Set with insightex_session on the same link, to protect against forged requests. | 2 hours | First-party cookie |
insightex_cookie_consent | Remembers your cookie choice and the policy version you answered. | 180 days | First-party cookie |
nuxt-color-mode | Remembers your light or dark theme. | Until cleared | Local storage |
insightex:announcement-dismissed:* | Remembers which site announcements you closed. | Until cleared | Local storage |
firebase-messaging-database, firebase-installations-database | Only after you turn on push notifications for this device: the push token Google Firebase Cloud Messaging issued for this browser, so notifications reach it. | Until you turn push notifications off or clear site data | IndexedDB |
insightex:push | Remembers that you turned on push notifications on this device, so the push token is kept up to date. | Until you turn push notifications off or clear site data | Local storage |
Fonts (always loaded)
Our typefaces are served by Google Fonts. Every page asks fonts.googleapis.com and fonts.gstatic.com for them, whatever you choose here, so Google receives your IP address and browser details. Google Fonts sets no cookies and stores nothing in your browser. See the privacy policy for details.
Security checks on forms
When we turn on human verification (Cloudflare Turnstile, hCaptcha or Google reCAPTCHA) on sign-up, password-reset, newsletter and notice forms, the provider loads a script and may set its own cookies to tell people from bots. Only the provider we configure is loaded, and only on those forms. See that provider's privacy policy for details.
Embedded players
Video and podcast players (for example YouTube in privacy-enhanced mode, Vimeo, Spotify or Apple Podcasts) load only when an article includes one, and may set the provider's own cookies once they load.
Analytics (optional)
Off unless you choose it, and never used when your browser sends Do Not Track or Global Privacy Control. Our analytics is first-party and cookie-free: it sets no cookie and stores nothing in your browser. Choosing "Analytics" only permits the anonymous page-view measurement described in the privacy policy.
Marketing (optional)
We do not use advertising or retargeting cookies today. If that changes, they will stay off unless you opt in here.
More
See the privacy policy for how personal data is used and your rights.