Cookie Policy
This policy explains how the DGS Trade Fair website uses cookies and why. We keep cookie use to an absolute minimum: only what is required for the site to function securely.
1. What Are Cookies?
Cookies are small text files that a website stores on your device. They are sent back to the website with each request, allowing the site to remember information about your session.
2. Cookies We Use
We set three first-party cookies, all of which are strictly necessary for authentication and security. We do not use any analytics, advertising, or third-party cookies.
| Cookie | Purpose | Duration | HTTP-only |
|---|---|---|---|
access_token | Identifies your current session. Contains a signed JWT with your basic profile information. | 20 minutes | Yes |
refresh_token | Used to silently renew your session when the access token expires, so you are not logged out mid-visit. | 30 days | Yes |
csrf_token | Protects against Cross-Site Request Forgery attacks by verifying that form submissions originate from this site. | Session | No |
The access_token and refresh_token cookies are marked HTTP-only, meaning they cannot be read or modified by JavaScript; only the
browser sends them automatically with each request. This protects your session against
cross-site scripting attacks.
3. Strictly Necessary Cookies
All three cookies above are strictly necessary for the site to function. Without them it is not possible to sign in, maintain a session, or submit an application securely. Because they are strictly necessary, they do not require your consent under the ePrivacy Directive.
You may disable cookies in your browser settings, but doing so will prevent you from signing in or using any features that require authentication.
4. Local Storage
Besides cookies, the site keeps a small amount of data in your browser's local storage. Unlike cookies, this data is never sent to our server; it stays on your device and is only read by the site itself.
| Key | Purpose |
|---|---|
mode-watcher-mode | Remembers your light/dark theme preference. |
whats_new_last_seen | For staff accounts: remembers the last site update you viewed on the "What's New" page, so the sidebar can show a dot when there is something new. |
blog_last_seen | Remembers the newest blog post you have seen, so the sidebar can show a dot when something new is published. |
notices_last_seen | For stallholder and staff accounts: remembers the newest notice you have seen, so the sidebar can show a dot when something new is published. |
admin_last_seen | For staff accounts: remembers the newest application or support ticket you have seen on the admin dashboard, so the sidebar can show a dot when something new needs review. |
my_stall_last_seen_status | For stallholder accounts: remembers your stall application's status when you last viewed your stall page, so the sidebar can show a dot when it changes (e.g. when your application is approved). |
wrapped_last_seen | Remembers the newest yearly "Trade Fair Wrapped" summary you have viewed, so the sidebar can show a dot when a new one is published. |
The site also uses session storage (cleared automatically when you close the
tab) with keys starting with stall_viewed_, so that refreshing a stall page
doesn't count as an extra visit in that stall's view count.
None of these values contain personal data, and all of them can be removed at any time by clearing your browser's site data.
5. No Third-Party Cookies
We do not load any advertising networks, social media widgets, or analytics services that would set cookies from third-party domains. The only external service involved in your session is Google OAuth, which handles the login step on its own domain; once you are redirected back to this site, Google sets no further cookies here.
6. Managing Cookies
You can view, restrict, or delete cookies through your browser settings. Guidance for common browsers:
7. Changes to This Policy
If we introduce any new cookies we will update this page before doing so. The date at the top of this page reflects when it was last revised.