Version 1.0 · Last updated: April 2026
Cookies are small text files stored by your browser. SYNARIS also uses localStorage and sessionStorage (Web Storage API) to persist authentication state and cryptographic keys locally on your device. For legal purposes, these are treated equivalently to cookies under the ePrivacy Directive.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| SYNARIS_JWT | Essential | Authentication token bound to IP and device | Session / 8h |
| io (Socket.IO) | Essential | Real-time socket session identifier | Session |
| _sign_sk (localStorage) | Essential | Client-side Ed25519 signing key (non-extractable) | Persistent until logout |
| _mia_session (localStorage) | Essential | MIA assistant local conversation context | Persistent until logout |
| _webauthn_cid (localStorage) | Essential | WebAuthn credential ID for hardware authentication | Persistent |
SYNARIS is sovereign by design. No third-party tracker, analytics provider, CDN-tracking cookie, advertising network or social-media widget is loaded. All resources are served from the Controller's sovereign node.
All cookies and storage items listed above qualify as strictly necessary under Article 5(3) of the ePrivacy Directive (2002/58/EC as amended by 2009/136/EC) and its Spanish transposition (LSSI Art. 22.2). They are required for the operation of the authenticated service requested by the user and therefore do not require prior consent.
No non-essential cookie is set at any time.
You may disable cookies and Web Storage in your browser settings. Doing so will prevent login and make SYNARIS non-functional, as authentication state cannot be maintained.
To clear all local state, log out of SYNARIS. Logout removes JWT, signing keys and MIA session data from your device.
This Cookie Notice may be updated when the set of cookies changes. The version and date above reflect the current revision.
MARSHA (Processor): info@marshafoundation.org
See also our Privacy Notice.