A plain-language record of every cookie and browser preference used by the YTC website
Document scope
This policy applies to the public website, sign-in pages, and authenticated browser panels on yementc.org, including their English mirrors.
What are cookies and local storage?
Cookies are small values that this website asks your browser to keep and return with later requests. Local storage is browser storage, not a cookie, and is not automatically sent to the server. We apply the same Preferences choice to the optional local-storage names listed below.
Who is responsible?
Yemen Tech Collective is responsible for the first-party website storage described here. Laravel and the self-hosted Vuexy theme are technologies we operate; they are not third parties receiving this data.
What do we use?
Necessary cookies operate the session, protect forms, sign you in securely, remember you only when you ask, and retain your cookie choice. Optional Preferences store only the theme and whether the dashboard menu is collapsed. Necessary storage remains on; Preferences is off until you choose it.
Complete cookie and browser-storage register
| Exact name | Provider | Category | Purpose and creation | Duration and deletion | Controls |
|---|---|---|---|---|---|
| ytc-platform-session | Yemen Tech Collective | Necessary cookie | Created when a web route needs a session; carries an opaque session identifier for authentication, locale, flash messages, and temporary OAuth state. | 120 minutes of inactivity, renewed with activity; current session invalidated on logout. | HttpOnly; SameSite=Lax; Secure in production; Path=/; host-only with no Domain attribute. |
| XSRF-TOKEN | Yemen Tech Collective | Necessary cookie | Created with web session/CSRF responses so same-origin JavaScript can protect forms and requests from cross-site submission. | 120 minutes, renewed with the session. | Intentionally readable by same-origin JavaScript; SameSite=Lax; Secure in production; host-only; never logged. |
| remember_web_<hash> | Yemen Tech Collective | Necessary cookie, conditional on your action | Created only after a successful sign-in when you select Remember me; contains an encrypted and signed recaller. | Up to 400 days; removed on logout and invalidated by relevant account-security token rotation. | HttpOnly; SameSite=Lax; Secure in production; host-only; never exposed to JavaScript. |
| ytc_cookie_consent | Yemen Tech Collective | Necessary choice-management cookie | Created when you accept, reject, or save choices; contains policy version, necessary=true, the allowed Preferences choice, and decision time—no user ID, UUID, IP address, or user agent. | 12 months, or until the policy version/categories change; invalid or expired values fail closed. | Strict version/category/value validation; SameSite=Lax; Secure in production; host-only; used only to apply your choice. |
| admin-mode | Yemen Tech Collective | Optional Preferences cookie | Created only after Preferences permission and a theme change; stores light or dark so the server renders the selected theme without a flash. | 365 days, or until withdrawal/browser clearing. | Only light/dark accepted; SameSite=Lax; Secure in production; host-only; intentionally JavaScript-readable. |
| templateCustomizer-vertical-menu-template--Theme | Yemen Tech Collective | Optional Preferences local storage | Created only after Preferences permission and a theme change; stores light or dark for self-hosted theme helpers. | Up to 12 months through the consent decision; removed on rejection, withdrawal, or expiry. | Never read to affect the interface or written before opt-in; only light/dark accepted. |
| templateCustomizer-vertical-menu-template--LayoutCollapsed | Yemen Tech Collective | Optional Preferences local storage | Created only after Preferences permission and a dashboard menu change; stores true or false. | Up to 12 months through the consent decision; removed on rejection, withdrawal, or expiry. | No route, role, or usage history; only true/false accepted. |
What do we not use?
This release uses no analytics or marketing cookies, advertising pixels, tag manager, heatmap, session recording, browser fingerprinting, cross-site tracking, third-party consent manager, or embedded social tracker. We do not sell browsing data. Accepting Preferences does not authorize any future analytics or marketing tool.
External links and Google OAuth
Social and other external links send nothing to those sites through an embed before you click. After you leave YTC, the external site applies its own policy. If Google sign-in is enabled and you start it, your browser is redirected to Google; cookies Google sets on its own domain follow Google’s policy and are not YTC first-party cookies in this register.
How can I change or withdraw my choice?
Open Cookie settings from the public footer, sign-in footer, account menu, or this policy. You may allow Preferences, reject optional storage, or withdraw a previous choice at any time. Rejection or withdrawal deletes only the three optional names YTC owns; it never clears unrelated browser storage. Closing settings without saving changes nothing.
What happens if necessary cookies are blocked?
Public pages remain readable. Sign-in, protected forms, and account sessions may not work because they require session and form-security cookies. Allowing necessary first-party cookies restores those operations; accepting Preferences is never required to use the site.
Changes to this policy
We publish the version and effective date. A future tool or storage purpose that collects new data requires an approved policy update, an updated register, and a new choice before its first request or write; it cannot inherit an older Preferences decision.
Contact
Questions about this policy or browser storage can be sent to privacy@yementc.org. The technical facts in this policy reflect release 1.0 effective 16 August 2026.