Cookie and browser storage policy

Version 2026-09-30.2 — 30 September 2026

1. What is this storage used for?

OTCValue uses storage mechanisms to maintain sign-in, protect forms and remember certain choices. Information may also be stored temporarily within a browser tab.

Trackers strictly necessary for a service requested by the user may be exempt from consent. Other trackers requiring consent must not be placed before a valid choice. Their classification depends on their actual purpose and use, not merely their name.

2. Storage used by feature

The periods below describe the application's mechanisms. Cookies associated with a particular process are used only when that process is enabled and followed. Server-ticket lifetimes and cookie lifetimes are not necessarily identical.

.AspNetCore.Identity.Application and technical fragments: maintain the requested sign-in. Session cookie without remembering sign-in; when remembered, initial validity of fourteen days, renewable through sliding expiration. The server ticket has its own fourteen-day validity.

Identity.TwoFactorUserId: intermediate two-factor authentication step. Five-minute ticket; intermediate session cookie.

Identity.TwoFactorRememberMe: remember an approved device at the user's request. Fourteen days by default, subject to renewal and revocation rules.

Identity.External: intermediate external sign-in state. Five-minute ticket; session cookie, only if external sign-in is enabled and used.

.AspNetCore.Antiforgery.…: protect forms against forged requests. Browser session; application-specific suffix.

OTCValue.LoginAttemptEmail: temporarily remember the address used in a sign-in attempt. Five minutes.

otc_preferred_language_id: remember the selected language. 365 days.

otc_preferred_theme: remember the selected theme. 365 days.

otcvalue:report:…:v1 in sessionStorage: retain report settings per user and tab. Tab session, subject to browser session restoration.

Preferences stored server-side in the account are covered by the privacy policy. Loading third-party resources can transmit technical data even without cookies.

Some libraries are loaded from jsDelivr, operated by Volentio JSD Limited. These requests transmit an IP address and technical connection information, among other things. The provider's published policy states that it does not use cookies or similar technologies: https://www.jsdelivr.com/terms/privacy-policy. That statement concerns that provider, not every website process. THELOS has declared no additional advertising or audience-measurement service within the scope described here.

Payment may open Stripe-hosted pages. Their technologies, periods and choices depend on the features used and are described by Stripe: https://stripe.com/fr/privacy. Settings and choices displayed on those pages apply to their processes; Stripe's general inventory must not be treated as a list of cookies all placed by OTCValue.

3. Managing your choices

Language and theme can be changed using the corresponding service controls. Browser settings also let you inspect or delete cookies and storage; deletion may sign you out or remove preferences.

Any use of trackers requiring consent requires a valid prior choice, with refusal and withdrawal available under applicable conditions. Refusing an optional purpose does not amount to refusing the entire service. This policy does not itself collect consent.

4. Contact and further information

Questions: contact@otcvalue.com. The privacy policy (https://otcvalue.com/Legal/4) explains the purposes, recipients and rights relating to personal data.

Classification reference: CNIL — cookies and other trackers (https://www.cnil.fr/fr/cookies-et-autres-traceurs/que-dit-la-loi).