CalMate Cookie Notice
Version: 1.0
Last updated: 28 July 2026
Effective date: 28 July 2026
This notice describes the cookies and other browser storage used on CalMate’s public website and web application interfaces. See the Privacy Notice for further details about processing.
1. Categories
- Essential: required for secure operation of the website and account, forms, sessions and remembering the consent choice. It cannot be disabled.
- Convenience settings: remembers the selected language, appearance and sidebar state. It is persisted only after permission is given.
- Analytics: allows GA4 measurement on the public marketing home page and public workplace-category pages. Google Analytics is not loaded on the sign-in, Workplace or system-administration interfaces.
2. Essential cookies
| Name | Provider and scope | Purpose | Expiry |
|---|---|---|---|
calmate_session |
CalMate, current host | Securely maintaining the session and sign-in. | By default, after 120 minutes of inactivity. |
XSRF-TOKEN |
CalMate, current host | Protecting forms and requests from forged actions initiated by another website. | With the session. |
calmate_cookie_consent |
CalMate; .calmate.hu in production |
Stores the decision for convenience and analytics categories, the schema version and decision time. It provides one setting across our subdomains. | No more than 12 months. |
In production, the consent cookie uses Secure, SameSite=Lax and Path=/. It is host-only in local and test environments.
3. Convenience cookies and browser storage
These items are retained only after the Convenience settings category has been allowed. They are deleted when permission is withdrawn; the current page remains usable for the rest of the session.
| Name | Type and scope | Purpose | Expiry |
|---|---|---|---|
appearance |
Cookie, current host | Remembers the light, dark or system appearance. | No more than 12 months. |
sidebar_state |
Cookie, current host | Remembers whether the web application sidebar is open or closed. | 7 days. |
appearance |
localStorage, current origin |
Applies the selected appearance on the client. | Until withdrawal, deletion or the browser data is cleared. |
language |
localStorage, current origin |
Remembers the selected web-interface language. | Until withdrawal, deletion or the browser data is cleared. |
A signed-in user’s language saved server-side on their account is not a cookie and is not part of this optional browser storage.
4. Google Analytics and Advanced Consent Mode
| Name | Provider and scope | Purpose | Expiry |
|---|---|---|---|
_ga |
Google Analytics, the calmate.hu marketing host |
Random browser identifier used to distinguish visits. | No more than 12 months. |
_ga_<measurement-id> |
Google Analytics, the calmate.hu marketing host |
Maintains GA4 session state. The exact suffix depends on the measurement ID. | No more than 12 months. |
These cookies may be created only after the Analytics category has been allowed. On withdrawal, analytics storage is denied and _ga and _ga_* cookies belonging to the marketing host are deleted. If consent is withdrawn on an app subdomain, the shared consent becomes denied immediately; host-only GA cookies are removed before GA is configured on the next calmate.hu page load.
The public marketing pages use Google Advanced Consent Mode. All storage and advertising states are denied before the Google tag. ad_storage, ad_user_data and ad_personalization always remain denied. Without analytics consent no _ga cookie is created, but Google may receive limited cookieless measurement signals. These do not contain a CalMate account identifier, name, email address, workplace name, message or form-field value.
5. External resource
The website continues to load its Font Awesome JavaScript kit from the external kit.fontawesome.com source. During the request, the provider may receive technical connection data such as the IP address, browser type, referring page and timestamp. This resource is not disabled by the cookie setting.
6. Managing settings
On the first visit, a person can accept all categories, use essential storage only, or configure each category. The choice can later be changed from the Cookie settings button in the bottom-right corner of every CalMate web interface.
Cookies and website data can also be deleted or blocked in the browser settings. Blocking essential cookies may prevent sign-in, forms or parts of the web application from operating correctly.
For privacy questions, contact privacy@calmate.hu.