Cookie Policy

Summary

The public ELSI website does not use analytics, advertising, or tracking cookies. We do not load Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any equivalent. If you only browse the public pages, no cookie is placed on your device at all. Cookies are set only when you use the employee portal at /portal — signing in, starting a password reset, or switching the portal language. We show a short cookie notice on your first visit; because we currently set nothing that requires consent, it has nothing to switch off, and your acknowledgement is remembered so we do not ask again.

What cookies are

Cookies are small text files placed on your device by the websites you visit. Romanian Law 506/2004 (transposing the EU ePrivacy Directive) and the GDPR require website operators to inform visitors about the cookies they use and, for any cookie that is not strictly necessary, to obtain prior consent before setting it.

Cookies set by this website

The table below lists every cookie this website sets, as at the 'Last updated' date above. All are first-party — set on the endurancelift.ro domain, including its www subdomain — and none is used for advertising, analytics, or cross-site profiling. Our hosting provider may additionally set a short-lived security cookie if its automated-attack protection is triggered.

• sb-<project-id>-auth-token — holds your employee-portal sign-in session. When the value is large the browser stores it as numbered continuation cookies (sb-<project-id>-auth-token.0, .1). Set when you sign in at /portal. Strictly necessary; no consent required. First-party, path=/, SameSite=Lax, Secure. Persistent: it survives closing your browser and expires after up to 400 days, or immediately when you sign out. It is readable by scripts running on this site (not HttpOnly), because the portal completes sign-in in your browser; this site loads no third-party scripts.
• sb-<project-id>-auth-token-code-verifier — a one-time security value written when you request a password-reset or magic-link email from /portal/login or /portal/forgot-password. It protects that link against interception (PKCE) and is deleted as soon as the link is used. Note that it is written before you are signed in. Strictly necessary; no consent required. First-party, path=/, SameSite=Lax, Secure.
• portal_locale — remembers whether you chose English or Romanian in the employee portal. Set only when you use the language switcher inside the portal. Strictly necessary for the feature you triggered; no consent required. First-party, path=/ (so it is sent on all pages of this site), SameSite=Lax, Secure, HttpOnly, 12 months.
• elsi-cookie-notice — records that you dismissed our cookie notice, and which version, so we do not show it again. Set only when you click a button on the notice. Strictly necessary for that preference; no consent required. First-party, path=/, SameSite=Lax, Secure, 12 months.

We do not use any other cookies, local storage, session storage, fingerprinting, or third-party tags on the public website. If that ever changes — for example if we add a consent-based analytics tool — this policy will be updated and your consent will be requested through the cookie notice before any non-essential cookie is placed on your device.

Third-party services we link to (no embedded tracking)

Some pages link out to third-party services. Clicking a link takes you off our website and into the third party's own privacy and cookie regime. We do not embed any of these services in a way that would set their cookies on your device while you remain on our site:

• Google Maps — we link to it via 'Open in Google Maps' buttons. We do not embed the Google Maps iframe on our pages.
• LinkedIn and YouTube — we link to our company profiles in the footer. We do not embed their videos or follow-buttons.
• Your email client — 'mailto:' links open your own email program; no data is transmitted to us until you choose to send the message.

Managing cookies in your browser

All modern browsers let you view, block, or delete cookies through their settings. Because this website sets no non-essential cookies, browser-level blocking will not affect your use of the public pages. If you block the strictly-necessary cookies listed above, the employee portal will be unable to keep you signed in, and our cookie notice will reappear on each visit because we cannot record that you dismissed it.

Updates

We will revise this Cookie Policy if we add, remove, or change the cookies we use. The 'Last updated' date at the top of the page indicates the most recent revision.

Contact

For questions about cookies on this website, contact elsi.contact@endurancelift.com.