Cookies
This English version is a convenience translation; the Czech version prevails in case of any discrepancy.
This page describes everything the danito.cz website and the app.danito.cz application store in your browser. The handling of personal data is governed by a separate privacy policy.
What cookies are
Cookies are small text files that a website stores in the user’s browser. Among other things, they serve to store preferences or to run the login session. The browser offers other storage with the same effect — localStorage and sessionStorage — and this page lists those alongside cookies, because from a privacy standpoint they are the same thing. First-party cookies are set by the domain you visited directly; third-party cookies are set by foreign domains embedded in the page (for example advertising systems) — the Danito service uses no third-party cookies.
What we store
The marketing website (danito.cz) and the help portal store nothing in your browser. You can check for yourself in your browser’s developer tools.
The following four items are created only in the app.danito.cz application. The XSRF-TOKEN cookie is set on the very first page load, before you sign in — without it the sign-in form would be unprotected. The JSESSIONID cookie is created once you sign in, and the remaining two once you choose a language or start filling in a document.
| Name | What it is for | Where it is stored | How long it lasts |
|---|---|---|---|
JSESSIONID | Keeps you signed in | Cookie on app.danito.cz | Until sign-out, at most 30 days |
XSRF-TOKEN | Protects your account so no foreign page can act as you | Cookie on app.danito.cz | Until you close the browser |
danito.language | Remembers the language you chose | localStorage in the browser | Until you delete it |
danito.invoice_draft, danito.cost_document_draft | Keeps a document you started until you save it | sessionStorage in the browser | Until you close the tab |
The JSESSIONID cookie has the attributes HttpOnly, SameSite=Lax, and Secure (on HTTPS); its lifetime is renewed on each user activity up to a limit of 30 days of inactivity.
If anything else that is stored in your browser is ever added to the service, it will be added to this table within the same release.
Why we never ask you
All four items above are necessary for you to use the service — without them the application would sign you out, leave your account unprotected, forget your language, and lose the document you started. For such items the law requires no consent (Section 89(3) of Czech Act No. 127/2005 Coll. on Electronic Communications, and Art. 5(3) of the ePrivacy Directive). We do have to tell you about them, however — that is what this page is for.
We store nothing optional, so there is nothing to decide and Danito has no cookie banner.
Third parties
The Danito service uses no third-party cookies — no advertising pixels, no social-network buttons loaded from foreign domains, no third-party CDNs.
Changes to this document
If another item stored in the browser is added to the service (for example when a new payment processor is involved), this page will be updated within the same release and a substantial change will be announced on the main changelog page (/en/zmeny).