SYNAPTOSEC // STATUTORY RECORD

Cookie Notice

VERSION: 0.1-draft • EFFECTIVE (UPON APPROVAL): 2026-10-14 • JURISDICTION: ANTWERPEN, BELGIUM
DRAFT — PENDING LEGAL REVIEW. This text is not yet in force. It was prepared from a verified facts register (docs/legal/FACTS.md) and must be reviewed by a qualified lawyer before it takes effect.
Version 0.1-draftEffective date 2026-10-14 (upon approval)ChangelogOperator: SynaptoSec · Antwerpen (Antwerp), Belgium

24/24 public pages: ZERO cookies set by the website, ZERO localStorage/sessionStorage/IndexedDB usage, ZERO third-party requests (browser audit, local preview of the production build). The site uses no analytics, no tracking pixels, no embeds and no advertising. Because only strictly necessary cookies exist, no consent banner is shown: Belgian rules require consent for analytics, statistics and advertising cookies — disclosure for strictly necessary ones, which is exactly this page. Continued browsing is not treated as consent and no consent is requested.

Strictly necessary cookies (customer portal)

CookiePurposeLifetimeFlags
__Host-synapto_sessionSign-in session (opaque 256-bit token; keeps you signed in to the customer cabinet)30 days maximum (signing out ends it immediately)HttpOnly=true · Secure · SameSite=Lax
__Host-synapto_csrfCross-site request forgery protection (double-submit token read by the site's own JavaScript)30 days maximum (signing out ends it immediately)HttpOnly=false · Secure · SameSite=Lax
__Host-synapto_preauthSigned pre-authentication bundle during the sign-in redirect (anti-forgery state/nonce)10 minutesHttpOnly=true · Secure · SameSite=Lax
__Host-synapto_bindBinds a sign-in link to the browser that requested it (stolen-link protection)about 16 minutesHttpOnly=true · Secure · SameSite=Lax

Table generated from the audited inventory (docs/site/COOKIES.json, audited 2026-10-14) — it cannot drift from the audit.

Your control

You can delete these cookies at any time by signing out (or clearing cookies in your browser). Without the session cookies you simply are not signed in; nothing else changes. A separate consent manager exists and will become visible only if a non-essential tool is ever added; withdrawal will be as easy as giving.

Third parties

The website itself requests no third-party content; fonts are self-hosted. Sign-in redirects to Google/GitHub are user-initiated navigations. Server-side processors are listed at .

Statutory Documentation Index
Legal inquiries: legal@synaptosec.comSynaptoSec • Antwerpen, Belgium • BV registration in progress