Cookie Notice

What CANTONA OS stores in your browser, and why.

Version 1.0 · effective 6 October 2026 · Cantona BV · Not yet reviewed by a lawyer.

The short version

CANTONA OS sets two cookies and keeps two values in your browser’s local storage. All four are necessary for the system to work. There are no analytics cookies, no advertising cookies and no third-party trackers, which is why you are not asked to accept anything.

Cookies

Name	What it does	Lasts
`cantona_session`	Proves you are signed in, and which modules you hold. It is signed by the server and marked HttpOnly and Secure, so no script in the page can read it and it is only ever sent over HTTPS. Without it every page refuses to open.	Until it expires or you sign out
`os-vp`	Records whether you signed in on a phone or on a computer, so the launcher sends you to the right landing page. It holds the single word `phone` or `desktop` and nothing else — no identifier.	1 year

Local storage

Two values are kept by the browser rather than sent to us. They never leave your device.

Name	What it does
`cantona-auth`	A flag saying a sign-in happened on this browser, so a page can show itself immediately instead of flashing the login screen first.
`cantona-user`	Your name, email, role and the modules you hold, so menus can be drawn before the server answers.

Neither of these grants anything. Access is decided by the signed cantona_session cookie and checked on the server for every request — editing these values in your browser changes what a menu looks like and nothing else.

Why there is no “accept cookies” banner

Under the Belgian and EU ePrivacy rules, consent is needed for cookies that are not strictly necessary — analytics, advertising, cross-site tracking. We set none of those. Everything above is required to sign you in, keep you signed in, or show you the right page, so asking for consent would be asking about something you cannot decline while still using the system.

CANTONA OS is also an internal business system rather than a public website, so there is no visitor who has not already been given an account.

Controlling them yourself

Sign out — from the 7 menu at the top right. This ends the session.
Sign out everywhere — Settings → Account, which ends every session on every device.
Clear them — your browser’s settings will delete cookies and local storage for this site. You will simply be asked to sign in again.
Block them — you may, but CANTONA OS cannot sign you in without cantona_session, so the system will not work.

If this changes

If an analytics, advertising or other non-necessary cookie is ever added to CANTONA OS, this page must be updated and a consent banner added before that cookie is set — asking first, not afterwards. The date at the top of this page is when it was last checked against the running site.

Questions: dev@garrincha.be. How we handle personal data generally is in the Privacy Notice.