Cookie Policy
Last updated: September 13, 2026
1. What cookies and browser storage are
Cookies are small text files a website stores in your browser. Browser storage (localStorage and sessionStorage) works in a similar way: a website can write settings or technical data into it.
This policy lists everything the corpilus.com website stores in your browser, what for and for how long. The website is operated by CREBISO | corp.systems s.r.o., contact info@crebiso.com.
2. Necessary and functional cookies
Necessary — the website does not work without them, so they need no consent:
- NEXT_LOCALE — a cookie set by this website. Remembers the website’s language. Duration: until you close the browser (session cookie).
- corpilus_consent — a cookie set by this website. Remembers your cookie choice, so we do not ask again on every visit. Duration: 6 months.
Functional — only with your consent (the “Functional” category in the cookie settings):
- corpilus-theme — browser storage. Remembers the light or dark theme; stored only once you switch the theme. With consent it stays in localStorage until you clear it in your browser; without consent it is kept in sessionStorage only until you close the browser tab.
- corpilus_expert_mode — browser storage. Remembers the “I’m a user” or “I’m an IT expert” view; stored only once you switch the view. Same duration as corpilus-theme.
- shield-cta-dismissed — sessionStorage, on the Shield page only. Remembers that you closed the prompt in the interactive demo, so it does not appear again. Duration: until you close the browser tab.
3. Website security: the Corpilus Shield widget
The website is protected by our own product, Corpilus Shield. Its widget loads from api.corpilus.com and helps recognise automated access, form spam and misuse of the website.
- cs_fp_hist_v1 — localStorage. Device fingerprint history: stores the fingerprint (hash) and the technical browser properties it was built from (for example browser, language, timezone, screen, graphics), with the time of the five most recent checks. Category: website security. Duration: until you clear it in your browser.
- cs_rules_v1 — localStorage. A cache of security rules downloaded from the server, so they do not have to be fetched on every page. Category: website security. Duration: the rules are valid for five minutes; an expired entry is removed the next time it is read.
While it works, the widget sends technical data about the request and about behaviour on the page to api.corpilus.com, so its security can be assessed. The server also processes your IP address in doing so. The widget sets no cookies. More about this processing is in the Privacy Policy.
4. Analytics and marketing
Analytics: with your consent (the “Analytics” category in the cookie settings), the website uses Google Analytics 4. It shows us which pages people read and how they found the website. The provider is Google Ireland Limited (Ireland); the data may also be processed by Google LLC in the USA under the EU–US Data Privacy Framework. Google signals and ad personalisation are switched off, so no advertising profiles are built from this data. Until you consent, Google Analytics does not load and nothing is sent to Google.
- _ga — a cookie set by Google Analytics. Tells returning visitors apart. Duration: 13 months.
- _ga_3381HP94SG — a cookie set by Google Analytics. Keeps the state of the current visit. Duration: 13 months.
Marketing: we do not use marketing tools yet; before adding any, we will update this policy and ask for your consent.
The website’s fonts are loaded from Google Fonts. It stores no cookies in your browser, but Google receives your IP address when the fonts load (see the Privacy Policy).
5. The Corpilus application
The Corpilus application at app.corpilus.com uses browser storage that is strictly necessary for signing in and keeping your session. This policy covers the corpilus.com website; customer data in the application is governed by the contract with the customer.
6. Managing and deleting this data
- You can change or withdraw your consent at any time with the “Cookie settings” button — the round button at the bottom left of the page, or the link of the same name in the footer. When you withdraw consent for analytics, the website stops Google Analytics and deletes its cookies.
- You can block or delete cookies in your browser settings. Without the NEXT_LOCALE cookie, the language is taken from the page address or your browser settings; without corpilus_consent we ask for your choice again.
- You can delete localStorage and sessionStorage data in your browser settings, by clearing site data for corpilus.com.
- If you delete the Corpilus Shield widget data, the widget creates it again on your next visit; the website keeps working, but the security check may be stricter.
Send questions about this policy to info@crebiso.com. When this policy changes, we update the date at the top of the page.