Cookies
Version 1.0. Effective 20 August 2026.
1. What this policy covers
This Cookie Policy explains how File Transfer - Tool - by Alexandru Jungean uses cookies and similar storage. It supplements the Privacy Policy and meets the information duty under the ePrivacy rules (Directive 2002/58/EC) as implemented in Romania by Law no. 506/2004.
2. The cookie this application sets
| Name | Type | Duration | Purpose |
|---|---|---|---|
send_op | Strictly necessary, first-party, httpOnly | 12 hours | Operator session after unlock on /operator. Value is an HMAC ticket bound to an expiry timestamp, not the operator secret. Flags: Path=/, SameSite=Strict, Secure in production. |
The cookie is issued only after a successful unlock. Locking, or waiting for expiry, clears it. Recipients never receive this cookie. Capability proofs are not stored in cookies. Cookie proofs are ignored by the API.
3. What we do not set
- No marketing, advertising, or social cookies.
- No analytics cookies and no third-party analytics SDK.
- No browser storage of proofs, links, or secrets.
- No consent-management cookie, because we do not set optional cookies.
4. Why there is no consent banner
Article 5(3) of the ePrivacy Directive allows storing information that is strictly necessary to provide a service the user explicitly requested. send_op exists only so the operator who asked to unlock can create transfers without sending the secret on every request. Optional cookies are not used, so a consent banner is not shown.
5. Infrastructure you do not control through this page
Netlify (hosting) and Cloudflare (R2 signed URLs) process HTTP requests. They may emit their own technical cookies or edge logs. This application does not set those cookies and does not read them for advertising. See each provider’s documentation if you want their lists.
6. How to delete the cookie
Use Lock on /operator, or delete site cookies in your browser, or wait 12 hours. After it is gone, create/upload/finalize will ask for unlock again.
7. Contact
Questions: alex.jungean@gmail.com. Do not paste proofs in email.