Cookie Policy
The dashiox service uses strictly necessary cookies and browser local storage. On the public website (home page, pricing, documentation, legal pages, contact and access request) we also use Google Tag Manager and, with your consent, Google analytics and marketing cookies (Google Analytics and, where applicable, Google advertising tags). Without your consent none of this is loaded and no Google cookies are stored. None of this is used in the portal after sign-in or in the administration.
List of cookies
| Name | Where | Purpose | Lifetime |
|---|---|---|---|
__Host-dashiox_s |
portal | identifier of the signed-in session (stored in the database only as a hash) | until sign-out, at most 7 days of inactivity |
__Host-dashiox_csrf |
website and portal | protection of forms against cross-site request forgery (CSRF) | until the browser is closed |
__Host-dashiox_admin |
operator administration | administrator session identifier | at most 8 hours |
__Host-dashiox_admin_csrf |
operator administration | protection of administration forms (CSRF) | until the browser is closed |
dashiox_lang |
website | remembering the language you chose with the language switch | 1 year |
__Host-dashiox_consent |
public website | storing your choice in the cookie banner: version of the consent text, chosen categories and time of the choice (no identifier) | 6 months |
_ga |
public website (Google Analytics) | only with analytics consent: distinguishing visitors for traffic statistics | up to 2 years |
_ga_* |
public website (Google Analytics) | only with analytics consent: keeping the session state | up to 2 years |
_gcl_* |
public website (Google advertising tags) | only with marketing consent: attributing a conversion to a click on a Google ad | 90 days |
Session and form protection cookies are set for our domain only (not shared with subdomains), with the Secure and HttpOnly flags (not accessible to scripts) and SameSite. The dashiox_lang cookie is created only when you switch the language manually. The __Host-dashiox_consent cookie is created only by your choice in the banner; it has the Secure and SameSite=Lax flags and is readable by the banner script (no HttpOnly). Google cookies are set on our domain by Google tools, and only after you consent to the respective category.
Browser local storage
| Key | Purpose | Lifetime |
|---|---|---|
dashiox-theme |
remembering the chosen colour mode (light/dark) on the public website | until cleared in the browser |
This value stays in your browser only and is never sent to the server.
Cookie consent and withdrawing it
On your first visit to the public website, a banner offers Accept all, Reject all and Settings, where you choose individual categories:
- Strictly necessary – always on (sign-in, form protection, language, storing your choice);
- Analytics – Google Analytics: measuring traffic and use of the website;
- Marketing – Google advertising tags: measuring ad conversions and ad targeting.
The analytics and marketing categories are not pre-selected. Google Tag Manager is loaded from Google servers only after you consent to analytics cookies; consent to marketing cookies applies only together with it (marketing consent on its own loads nothing). Until then (and without JavaScript) nothing is sent to Google servers. Closing the banner with the cross means rejection. We remember your choice (consent or rejection) for 6 months; after that, or when this text changes, we ask again. You can change or withdraw your consent at any time via Cookie settings in the page footer, as easily as you gave it. After withdrawal, the banner deletes the Google cookies stored on our domain (_ga, _ga_*, _gcl_*) and reloads the page. Google may transfer measurement data to the USA under the EU–US Data Privacy Framework; see the Privacy Policy for details.
Legal basis
The strictly necessary cookies (session, form protection, dashiox_lang and __Host-dashiox_consent) and local storage are strictly necessary to provide the service you explicitly request (sign-in, secure form submission, display in the chosen language and mode). Under Section 89(3) of Czech Act No. 127/2005 Coll., on electronic communications (implementing Art. 5(3) of the ePrivacy Directive), no consent is therefore required. Any processing of personal data relies on the performance of a contract and the legitimate interest in secure operation (Art. 6(1)(b) and (f) GDPR) – see the Privacy Policy. We store Google analytics and marketing cookies only with your consent (Section 89(3) of Czech Act No. 127/2005 Coll.), and the processing of personal data when measuring traffic on the public website relies on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time; withdrawal does not affect the lawfulness of processing before it.
Managing cookies
You can delete or block cookies and local storage at any time in your browser settings. Without the session and form protection cookies, however, you cannot sign in to the portal or submit a form. You manage your consent to analytics and marketing cookies via Cookie settings in the footer of the public website.
Version 1.1, effective from 3 October 2026