AITACS CRM — AI Therapy Assistant Calendar Suite  |  skillbuilder.club
AITACS CRM — Legal Documentation

Cookie Policy

Effective Date: February 20, 2026  ·  Version: 1.0  ·  Provider: Artem Chukov, Israel

GDPR Compliant ePrivacy Directive

Our Cookie Policy in Three Words: Almost None Used

🚫
No Advertising Cookies
Zero. We don't run ads.
🚫
No Tracking Cookies
No third-party analytics trackers.
Essential Only
Authentication & session management.

1. What Are Cookies?

Cookies are small text files that websites store on your device (computer, tablet, or phone) through your web browser. They are widely used to make websites function properly, remember your preferences, and provide information to the site owner.

In addition to cookies, modern web applications may use other browser storage mechanisms such as localStorage and IndexedDB, which serve similar purposes but can store larger amounts of data. This policy covers all of these technologies.

2. How AITACS CRM Uses Cookies

AITACS CRM uses a minimal cookie approach. We only use cookies that are strictly necessary for the Platform to function. We do not use any advertising, marketing, or third-party tracking cookies.

Cookie / Technology Set By Purpose Type Duration
__session / Firebase Auth tokens Google Firebase User authentication — identifies your logged-in session and maintains secure access to your account. Essential Session / up to 1 hour (auto-refreshed)
PHPSESSID AITACS CRM server Server-side session management for API requests. Contains no personal data — only a random session identifier. Essential Session (deleted when browser closes)
Hetzner / hosting cookies Hetzner Online GmbH Server infrastructure cookies required by the hosting environment (e.g., load balancing, security tokens). Essential Session
PayPal cookies (on payment page only) PayPal Set by PayPal during checkout for fraud prevention and payment processing. Only present on the payment page — not within the application. Essential Per PayPal's cookie policy
What We Do NOT Use

No Google Analytics. No Facebook Pixel. No advertising cookies. No retargeting. No behavioral profiling. No cross-site tracking. No cookie consent banner is required under the ePrivacy Directive because we only use strictly essential cookies (Art. 5(3) exemption).

3. Browser Local Storage

In addition to cookies, AITACS CRM uses browser-based storage technologies to enable the Platform's core functionality. This data remains on your device and is not transmitted to third parties (except through the de-identified AI data flow described in the Privacy Policy).

localStorage

Purpose: Stores application settings, UI preferences, cached session data, and client records for offline access and performance optimization.
Contains: User preferences, cached client data (pseudonyms, clinical context, calendar events), authentication tokens, application state.
Sensitive data: May contain client records including names and clinical data. This data is stored only on your device and is never transmitted to third parties in identifiable form. See Security Requirements for device encryption guidance.
Duration: Persists until manually cleared by the User or until the User logs out and clears application data.
Type: Essential — required for Platform functionality

IndexedDB

Purpose: Provides structured local database storage for larger datasets — client records, session history, file attachments, and synchronization queue.
Contains: Full client record objects, session logs, pending synchronization data.
Sensitive data: Yes — may contain full client records. All data remains on the User's device. Full-disk encryption (Security Requirement #3) protects this data at rest.
Duration: Persists until manually cleared or application data is reset.
Type: Essential — required for offline functionality and data synchronization

4. Cookie Categories Explained

4.1. Strictly Essential Cookies

These cookies are necessary for the Platform to function and cannot be switched off. They are set in response to actions made by you, such as logging in, setting preferences, or filling in forms. Without these cookies, the Platform cannot operate. Under the ePrivacy Directive (Art. 5(3)), strictly essential cookies do not require user consent.

4.2. Analytics Cookies

We do not use analytics cookies. We do not use Google Analytics, Mixpanel, Amplitude, Hotjar, or any similar third-party analytics service. Any usage statistics we collect are generated server-side from API request logs and contain no personally identifiable information.

4.3. Advertising / Marketing Cookies

We do not use advertising or marketing cookies. We do not run advertisements, and we do not participate in any ad network, retargeting service, or behavioral advertising platform. Your browsing activity on AITACS CRM is never shared with advertisers.

4.4. Social Media Cookies

We do not embed social media tracking widgets. If we link to our social media profiles (LinkedIn, Instagram, X, YouTube), these are standard hyperlinks that do not set cookies or transmit data until you choose to visit those platforms.

5. How to Manage Cookies and Local Storage

5.1. Browser Cookie Settings

You can control cookies through your browser settings. Most browsers allow you to view, manage, and delete cookies. Note that blocking essential cookies will prevent the Platform from functioning correctly.

Instructions for major browsers:

Chrome: Settings → Privacy and Security → Cookies and other site data

Firefox: Settings → Privacy & Security → Cookies and Site Data

Safari: Preferences → Privacy → Manage Website Data

Edge: Settings → Cookies and site permissions → Manage and delete cookies

5.2. Clearing Local Storage and IndexedDB

To clear locally stored application data:

Chrome: DevTools (F12) → Application tab → Storage → Clear site data

Firefox: DevTools (F12) → Storage tab → right-click → Delete All

Safari: Develop → Empty Caches, or Preferences → Privacy → Manage Website Data → Remove

All browsers: clearing all browsing data for skillbuilder.club will remove localStorage and IndexedDB data

Important

Clearing localStorage and IndexedDB will remove locally cached client data from your device. If your data is also stored on the server (SaaS plan), it will re-synchronize upon next login. If you are using the Desktop version with local-only storage, ensure you have a backup before clearing browser data.

6. Do Not Track (DNT)

Some browsers send a "Do Not Track" (DNT) signal with each HTTP request. Since AITACS CRM does not track users across websites and does not use any third-party tracking technologies, we effectively honor DNT by default. No behavioral tracking occurs regardless of your DNT setting.

7. Cookie Consent Banner

Under the ePrivacy Directive (2002/58/EC, Art. 5(3)) and its national implementations, websites that use only strictly essential cookies are exempt from the requirement to display a cookie consent banner. Since AITACS CRM uses no analytics, advertising, or tracking cookies, no consent banner is required.

If we add non-essential cookies in the future (which we currently have no plans to do), we will update this policy, implement a cookie consent mechanism, and notify Users before any changes take effect.

8. Third-Party Cookies

The only third-party cookies that may be set during your use of the Platform are:

a) Firebase Authentication cookies — set by Google Firebase for session management. These are essential and covered by Google's Firebase privacy documentation.

b) PayPal cookies — set only on the payment/checkout page, for fraud prevention and transaction processing. These are governed by PayPal's Cookie Policy.

No other third-party cookies are set by the Platform.

9. Changes to This Policy

9.1. We will update this Cookie Policy if we introduce new cookie categories or change how we use browser storage technologies.

9.2. Material changes will be communicated via email or in-app notification at least 14 days in advance.

9.3. The "Effective Date" at the top of this document reflects the most recent revision.

10. Contact

For questions about this Cookie Policy or how your data is stored:

Artem Chukov
Email: aitacs@skillbuilder.club
Web: skillbuilder.club

Related Documents

Terms of Service · Privacy Policy · Security Overview · User Security Requirements · Contact Us