Cookie Policy
Last updated: 26 July 2026
In short: OurTimetable uses only strictly necessary cookies to make signing in work. There are no analytical cookies, no advertising cookies and no third-party trackers. That is why we do not ask for cookie consent and you will not see a cookie banner.
What are cookies and storage techniques?
Cookies are small text files that a website places on your device. Browsers also offer similar techniques such as localStorage, with which a website stores information in your own browser without sending it to the server.
No consent is required for strictly necessary cookies: without them you cannot sign in and the service does not work. Consent is required for analytical and advertising cookies, but we do not use any.
Which cookies do we place?
| Name | Purpose | Type | Retention | Party |
|---|---|---|---|---|
| better-auth.session_token (on the secured site __Secure-better-auth.session_token) | Keeps you signed in and links your browser to a session record in our database. Not readable by JavaScript and only sent to our own site. | Functional (necessary) | 7 days, or earlier on sign-out. We can also revoke a session immediately from the server. | OurTimetable |
| better-auth.two_factor | Holds the second step of signing in between entering your password and entering your verification code. | Functional (necessary) | 10 minutes | OurTimetable |
| better-auth-passkey | Stores the one-time challenge while registering or using a passkey. | Functional (necessary) | 5 minutes | OurTimetable |
All three are HttpOnly (not readable by JavaScript), SameSite=Lax (not sent to other websites) and, on the secured site, Secure (HTTPS only). They contain no name, email address or other personal data: they are references to a record on our side.
We keep no copy of your session data in the cookie itself. That is a deliberate choice: because every session lives in the database, an administrator can revoke a session immediately and it is then genuinely gone.
What we store in your browser without a cookie
A number of display preferences are stored in the localStorage of your own browser. That data is never sent to the server and is strictly functional:
- the display preferences of the planning board, such as the number of weeks and the location filter;
- the selected period and view in the reporting section;
- which items you have ticked off on the day list today;
- whether the sidebar is expanded or collapsed;
- when using the kiosk: a temporary buffer of clock entries, so that a brief network outage does not cost an entry.
This storage remains until you clear your browser data. You can remove it yourself at any time through your browser settings.
What we do not do
- No Google Analytics, no tag manager and no other web statistics service.
- No advertising or tracking cookies, and no way to follow you across different websites.
- No external fonts or scripts from a CDN: we host the fonts ourselves, so your browser makes no request to a third party when opening the site.
- No error monitoring service forwarding data about your visit.
- We do not sell data.
There is one exception to the rule that nothing goes to a third party, and it lives in the app rather than on this website: if someone uses the optional voice input, their browser downloads the speech recognition model once from an external software source. The speech and the recognised text stay on the device. See the privacy statement.
Withdrawing consent
Because we place no cookies that require consent, there is no consent for you to withdraw. Should we ever start using a measurement service, we will first ask for your consent in advance with an option to refuse, and we will update this page. Withdrawing consent once given does not, pursuant to Article 7(3) GDPR, affect the lawfulness of processing before the withdrawal: withdrawal only works for the future.
You can refuse the strictly necessary cookies through your browser settings, but you will then be unable to sign in.
Changes and contact
We update this policy as soon as anything changes about what we place. The current version is always on this page, with the date of last amendment at the top. Questions about cookies? Email info@ourtimetable.com. You also always have the right to lodge a complaint with the Dutch Data Protection Authority.