Cookie Policy

Cookies are small values stored by your browser and sent with later requests to the same site. Tyrus also uses server-side PHP session state. On the main site, browser localStorage/sessionStorage is used for limited interface preferences only when Preferences are allowed. The public Demo additionally uses same-origin localStorage/sessionStorage for its own editor, help, interface and session state. Server-side databases used for analytics are not browser cookies.

• PHP session identifier (normally PHPSESSID) — session cookie used for session state such as language during the visit, secure download state and authenticated-session security. It normally ends with the browser/session, subject to browser behavior and server session lifetime.
• tyrus_consent — essential first-party cookie storing the timestamp and your Analytics/Preferences choices. Duration: up to 1 year. It is HttpOnly and SameSite=Lax; Secure is enabled on HTTPS.
• Secure download state — download tokens are kept in server-side session state and are not a separate dl_token browser cookie.

These items are necessary to remember privacy choices, maintain session security or provide a feature you request. They cannot be disabled through the Tyrus preference panel, although your browser can block or delete them; doing so may cause the site to ask again or make a requested session feature unavailable.

The public Demo also requires a PHP session cookie to create, reconnect to and secure its temporary sandbox. Demo operational analytics are stored server-side and are described in the Privacy Policy; raw search text is not collected and these analytics are not a separate browser cookie.

If you enable the Preferences category:

• site_lang — first-party language preference cookie, up to 1 year, SameSite=Lax and Secure on HTTPS.
• localStorage/sessionStorage — limited interface state such as language/UI preference and scroll restoration. sessionStorage normally lasts for the browser tab/session; localStorage remains until it is cleared or the site removes the value.

If Preferences are rejected, Tyrus removes the persistent site_lang cookie and the site remains usable without this optional category.

If you enable Analytics, Tyrus records first-party usage information in its own analytics database, such as page views, navigation/referrer, device/browser/OS, country/city trends, IP address and time of visit. This category is not written before consent and is automatically purged after 12 months.

Tyrus does not use Google Analytics or another third-party analytics network for this measurement. GeoIP enrichment is local-only when the local MaxMind database is available; there is no external GeoIP fallback that sends visitor IPs to a third-party lookup API.

After you make a consent choice, rejecting optional Analytics can still leave minimal aggregate operational counts used to understand basic service load and reliability. They may include day/hour, page, referrer host, country, broad device type and whether an event was a download. Raw IP addresses and user-agents are not written to this aggregate table, and there is no visitor-level identifier in the aggregate key. These aggregates are automatically purged after 12 months.

To demonstrate and respect your choice, Tyrus stores a server-side consent receipt with the timestamp/day, selected categories, a SHA-256 IP hash, shortened user-agent and referrer. The receipt is not used for advertising and is automatically purged after 12 months.

Tyrus does not intentionally set third-party advertising cookies or third-party analytics cookies as part of its consent and first-party measurement system. A third-party website you choose to visit from a link is governed by that third party's own cookie practices.

You can reopen the Cookie settings control available on the site and change Analytics or Preferences at any time. Withdrawing consent does not affect processing that was lawful before withdrawal. Your browser can also delete cookies and site storage; if it deletes tyrus_consent, the site will need to ask for your choice again.

Technically necessary cookies/storage are used where needed to provide the service or remember your privacy choice. Optional categories use consent. Tyrus treats cookie-derived personal data under the GDPR as described in the Privacy Policy. Danish cookie rules also require clear information and prior consent for non-essential storage, with an ongoing way to withdraw that consent.

The list above is intended to match the storage actually used by the site. If the implementation changes, this Policy and the consent panel should be updated together. Questions about cookies or privacy can be sent to angel@tyrus.dk.