Cookie Policy

1. Cookies

This site uses a minimal set of cookies required for authentication and session continuity. We do not use advertising or third-party tracking cookies.

• next-auth.session-token — issued only after an operator signs in. HttpOnly, SameSite=Lax. Deleted on sign-out.
• __Secure-next-auth.callback-url — callback URL for the auth flow.

2. Local Storage

We use localStorage for UI preferences only — never for tracking:

• mithqal.view — the currently selected view (Institution / Transparency / etc.).
• mithqal.theme — light/dark preference.
• mithqal.locale — language preference (en / ar / fr).

3. Analytics

We do not currently run a third-party analytics service. Server logs (IP, user agent, path, timestamp) are retained for 30 days for security and capacity planning.

4. Managing Cookies

You can clear cookies and local storage from your browser settings at any time. Authentication cookies will be removed on sign-out; UI-preference storage will persist until you clear it.

5. Contact

Questions: operator@mithqal.org.