GitLabDonate

LEGAL

Cookie Policy

Last Updated: October 17, 2026

Service: Identity and access management, self-hosted.
Domain: https://aham.ro
Contact: contact@aham.ro

1. Introduction

This Cookie Policy explains how the IAM service at aham.ro (“we”, “us”, or “our”) uses cookies and similar technologies when you use our Service. This policy should be read together with our Privacy Policy and Terms and Conditions.

By using our Service, you consent to the use of cookies as described in this Cookie Policy.

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. Cookies are widely used to make websites work more efficiently and to provide information to the website owners.

Cookies can be:

  • Session cookies: Temporary cookies that expire when you close your browser.
  • Persistent cookies: Cookies that remain on your device for a set period or until you delete them.

3. Cookies We Use

Our Service uses essential authentication cookies, third-party authentication cookies, and third-party advertising cookies.

3.1 Essential Cookies

These cookies are necessary for the Service to function and cannot be disabled without affecting the functionality of our authentication service.

iam Cookie

  • Purpose: Session management and authentication
  • Type: First-party, HTTP-only session cookie
  • Duration: Session-based (expires when you log out or close your browser, depending on “Remember Me” selection)
  • Information stored: Encrypted session identifier that links to your authenticated session
  • Why it’s necessary: This cookie is essential for maintaining your logged-in state and providing secure authentication across our Service and connected applications (Bazar, Vokably, etc.)

Technical details:

  • Marked as HttpOnly to prevent access via JavaScript, protecting against XSS attacks.
  • Marked as Secure (transmitted only over HTTPS).
  • Uses SameSite attribute to protect against CSRF attacks.

3.2 Third-Party Authentication Cookies

When you choose to authenticate using Google Sign-In, Google sets additional cookies.

g_state Cookie

  • Purpose: Google authentication state management
  • Type: Third-party cookie set by Google
  • Duration: Session-based or as determined by Google
  • Information stored: Google OAuth state parameter for security
  • Why it’s used: Set by Google to maintain the state of your Google authentication process and protect against CSRF attacks during the OAuth flow.

3.3 Third-Party Advertising Cookies (Google AdSense)

We use Google AdSense to display advertisements on our Service. Google AdSense uses cookies to serve ads based on your prior visits to our website or other websites on the Internet.

Google Advertising Cookies (IDE, ANID, NID, etc.)

  • Purpose: Personalized and non-personalized advertising, ad delivery, fraud detection, and reporting.
  • Type: Third-party cookies set by Google (.doubleclick.net and .google.com).
  • Duration: Persistent (ranging from a few days to up to 2 years).
  • Information stored: Unique identifier, ad interaction data, location data, and browsing history across sites using Google services.
  • Why it’s used:
    • To show you relevant ads tailored to your interests (personalized ads).
    • To limit the number of times you see an advertisement.
    • To measure the effectiveness of advertising campaigns.
    • To detect and prevent ad fraud.

4. Why We Use Cookies

We use cookies for the following purposes:

4.1 Authentication and Security

  • To recognize you when you log in and maintain your authenticated session.
  • To enable single sign-on (SSO) across connected applications.
  • To protect against unauthorized access to your account and CSRF attacks.

4.2 Advertising and Monetization

  • To show relevant advertisements through Google AdSense.
  • To measure advertising performance and prevent fraudulent activity.

5. How Long Do Cookies Stay on Your Device?

  • Session Cookies: The iam cookie typically expires when you log out or close your browser (unless “Remember Me” is enabled, extending it up to 30 days).
  • Persistent Cookies: Google AdSense and Google Sign-In cookies duration are controlled by Google according to their respective policies.

6. Managing and Opting Out of Cookies

6.1 Opting Out of Targeted Advertising

You can control personalized advertising served by Google and other advertising partners through the following tools:

6.2 Browser Settings

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies:

  • Google Chrome: Settings → Privacy and security → Cookies and other site data
  • Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Cookies and website data
  • Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
  • Opera: Settings → Privacy & security → Cookies

Important: Disabling essential authentication cookies will prevent you from logging in to the IAM service or connected applications.

7. Cookies We Do NOT Use

To remain transparent, here are types of cookies we do NOT use:

  • First-party behavior analytics cookies: We do not track your internal site interaction patterns for self-hosted analytics.
  • Social media plugin tracking: We do not use social media sharing widgets that track your browsing behavior outside of the explicit Google Sign-In flow.

8. Third-Party Services and Their Policies

8.1 Google Services (Google Sign-In & Google AdSense)

Google uses cookies to serve ads on our Service and manage authentication. For detailed information on how Google handles cookie data:

9. Data Protection and Privacy

  • Security: All authentication cookies are transmitted over HTTPS with appropriate security flags (HttpOnly, Secure, SameSite).
  • Data Minimization: Essential session cookies contain only an encrypted identifier and no direct personal information.

10. Legal Basis for Using Cookies

  • Essential Cookies: Based on contractual necessity and legitimate interest to provide a secure authentication service.
  • Advertising Cookies (AdSense): Based on your consent where required by law (such as under the EU ePrivacy Directive and GDPR). You may withdraw consent or customize ad preferences at any time.

11. Your Rights

Under applicable data protection laws (including GDPR), you have the right to be informed, access, delete, or object to cookie tracking. See section 6 for controls or consult our Privacy Policy.

12. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. Currently, there is no unified industry standard for DNT response. However, you can manage your advertising preferences using the opt-out links provided in Section 6.1.

13. Changes to This Cookie Policy

We may update this Cookie Policy from time to time. Updates will be reflected by changing the “Last Updated” date at the top of this policy.

14. Contact Us

For questions or concerns about our use of cookies, contact us at:

15. Summary

We use cookies to:

  • Maintain your logged-in session (essential)
  • Support Google Sign-In authentication (optional)
  • Deliver and measure advertisements via Google AdSense (advertising)

You can:

  • Manage or block cookies in your browser settings
  • Opt out of personalized ads via Google Ad Settings
  • Clear your session anytime by logging out
  • Contact us at contact@aham.ro for further information