Cookie Policy

1. Purpose of this policy

This Cookie Policy complements our Privacy Policy on the /privacy page. It describes each cookie category, each individual cookie in use, its purpose, its provenance, its retention period, its legal basis and the way in which the consent given to it can be modified or revoked. Sabeemod views the cookie banner not as a legal formality but as the beginning of a transparent relationship with the visitor: nothing is set for analytics or preferences before an affirmative click on "Accept" is registered, and a click on "Decline" is recorded with the same operational weight as an acceptance.

2. Definitions

For the purposes of this policy, the word "cookie" refers to any small text file stored by the browser at the request of a web server, and by extension to any equivalent technology (localStorage, sessionStorage, indexedDB, service-worker cache) that stores information on the visitor's device. A first-party cookie is set by the domain being visited (sabeemod.org and its subdomains). A third-party cookie is set by another domain, typically an embedded resource such as an analytics beacon or a font provider. Sabeemod does not set any third-party advertising cookie.

3. Categories in use

Four categories of cookies and equivalent technologies are documented on the sabeemod.org website. First, strictly necessary cookies, which cannot be refused because the website cannot function without them (they carry the session token, the cookie consent choice itself, and the anti-CSRF token used to protect form submissions). Second, functional cookies, which remember the visitor's language preference and the visitor's cookie consent granularity, and which are only set once the visitor accepts them. Third, analytics cookies, which count visits in an aggregated fashion so that the editorial team can decide which pages deserve more depth, and which are only set once the visitor accepts them. Fourth, preference cookies inside the customer workspace, which remember dashboard layout choices, saved filters and language, and which are set upon first login and can be cleared at any time from the workspace settings screen.

4. Detailed inventory

The website currently stores the following cookies and equivalent items. sa_cookie_choice, first party, localStorage entry, records whether the visitor accepted or declined non-essential cookies, retention thirteen (13) months, legal basis contract performance because the choice must be remembered to be respected. reservewithit_cart_v1, first party, localStorage entry, records the modules added to the shopping cart before checkout, retention until the visitor empties the cart or clears the browser storage, legal basis contract performance. sa_session, first party, session cookie, records the session identifier of a logged-in workspace user, retention until the browser tab is closed or until eight (8) hours of inactivity, legal basis contract performance, HttpOnly and Secure flags active, SameSite attribute set to Lax. sa_lang, first party, cookie, records the visitor's chosen interface language, retention twelve (12) months, legal basis consent, set only after the visitor accepts functional cookies. sa_analytics, first party, cookie, hashed pseudonymous identifier attached to aggregated visit counts, retention thirteen (13) months, legal basis consent, set only after the visitor accepts analytics cookies. No third-party analytics vendor is used on the sabeemod.org public website; visit counts are computed on our own European infrastructure.

5. Interaction with the cookie banner

The cookie banner appears on the first visit and remains visible until the visitor takes a decision. Two symmetrical buttons are offered, "Accept" and "Decline", of the same size and the same visual weight, so that the interface does not nudge the visitor toward one choice over the other. The choice can be reviewed and changed at any time by clicking the "Cookie settings" link in the footer, which reopens the banner and allows a new decision to be recorded. A refusal is honoured immediately: any non-essential cookie previously set is deleted, and any localStorage entry not strictly necessary is cleared.

6. Fonts and other embedded resources

The sabeemod.org website loads two font families from Google Fonts (Inter and Playfair Display). Font requests do not carry any cookie because they are loaded from the fonts.gstatic.com domain, which is configured by Google as a cookie-less domain. Nevertheless, the visitor's IP address transits through Google's servers to serve the font file. Sabeemod will self-host these fonts on its own infrastructure in the next scheduled release of the website, so that the IP address of visitors no longer transits through third-party servers for typographic resources. No other embedded third-party resource is loaded on the public website: no video player, no chatbot widget, no social-network share button, no external image CDN, no advertising pixel.

7. Cookies inside the customer workspace

The customer workspace, hosted on the app.sabeemod.org subdomain, uses a slightly wider set of cookies because it is an authenticated application. In addition to sa_session (already described), it uses sa_dashboard_layout to remember the arrangement of widgets, sa_saved_filters to remember the filters last applied to reports, sa_lang for the interface language, and sa_features to store the module entitlement matrix so that pages render immediately without a server round-trip. All these cookies are first-party, marked Secure and SameSite=Lax, and their contents contain no personal data beyond the session identifier and the user preferences described above.

8. Do Not Track and Global Privacy Control

The sabeemod.org website honours the Global Privacy Control signal (Sec-GPC HTTP header). When a browser sends Sec-GPC: 1 with a request, the website records this as an implicit refusal of analytics and functional cookies, and the banner is not displayed. The Do Not Track (DNT) HTTP header is treated in the same way, for legacy browsers that still send it. This behaviour is documented in the response headers so that automated compliance tools can verify it.

9. Retention and pruning

Cookies with a retention period longer than one (1) year are systematically reviewed on the anniversary of their initial setting: if the visitor has not returned in twelve (12) months, the cookie is deleted at the next visit. This retention pruning applies to sa_cookie_choice, sa_lang and sa_analytics. Consent logs (a server-side record of the moment a cookie choice was made) are kept for the duration of the consent plus three (3) years, so that the lawfulness of past processing can be evidenced in the event of a regulatory audit.

10. How to manage cookies at the browser level

All modern browsers allow the visitor to inspect, block, allow or delete cookies on a per-domain basis. The exact procedure varies by browser and by version, but is documented in the online help of each browser. Blocking strictly necessary cookies will prevent the website from functioning correctly. Blocking analytics or functional cookies will not prevent access to the website, but may result in a suboptimal experience (for example, the language preference will not persist between visits).

11. Changes to this policy

This Cookie Policy is updated whenever a cookie is added, removed or modified in its retention period, its provenance or its purpose. Material changes are notified by an in-banner message on the next visit to the website, so that the previous cookie consent choice can be reviewed in the light of the new inventory. The date of the last update is displayed at the top of this page, and previous versions can be requested from privacy@sabeemod.org.

12. Contact

For any question or complaint concerning the cookies used on the sabeemod.org website, the appropriate contact is privacy@sabeemod.org. The supervisory authority competent to receive complaints is Agencija za zaštitu ličnih podataka (AZLP), registration number 05-030/24-1938, address Bulevar Svetog Petra Cetinjskog 130, 81000 Podgorica, Crna Gora, telephone +382 20 634 883.