Privacy & transparency

Cookie notice

Last updated: 21 October 2026

We keep cookies focused on security and choices you request. This application does not install advertising cookies or optional third-party analytics.

Operator: ELITMAKER
Country: [Country]
Privacy contact: bahman@bahmanzangi.com
Website: https://elitmaker.at

Necessary cookies keep your session secure, protect authentication requests and complete sign-in. We also remember the language you explicitly select and whether you have dismissed our cookie notice. These cookies are not used for advertising or cross-site profiling.

Strictly necessary cookies do not require consent under the EU ePrivacy rules. We do not treat visiting this website, scrolling, signing in or dismissing this notice as consent to optional processing.

These cookies are first-party cookies on the application domain. Authentication cookies are set when needed for the sign-in flow; the entire list is not set on every page visit.

Cookie purposes and maximum retention
Cookie	Purpose	Duration
`elitmaker.invitation`Necessary	Keeps your encrypted invitation available while you create an account or sign in. HttpOnly and SameSite=Lax; Secure on HTTPS.	Up to 1 hour; cleared after successful acceptance.
`authjs.session-token`Necessary	Keeps you signed in to your account. Large sessions may be split into numbered cookies.	Up to 30 days, renewed while the session is active; cleared on sign-out.
`authjs.csrf-token`Necessary	Protects authentication requests against cross-site request forgery.	Browser session.
`authjs.callback-url`Necessary	Remembers where to return you after authentication.	Browser session.
`authjs.pkce.code_verifier / authjs.state`Necessary	Secures the sign-in redirect and verifies the authentication exchange.	Up to 15 minutes; cleared after the sign-in exchange.
`elitmaker_locale`Requested preference	Remembers the interface language you explicitly select. Not set until you choose a language.	1 year after your selection.
`elitmaker_cookie_notice`Necessary	Remembers that you dismissed the cookie information notice. Does not identify you or enable tracking.	180 days after dismissal.

On HTTPS, authentication names normally begin with __Secure-, or __Host- for the CSRF cookie. Authentication cookies are HttpOnly and use SameSite=Lax. Cookies set by this application use Secure on HTTPS.

Learning preferences in browser storage

When you change a learning preference in account settings, we save elitmaker_learning_preferences_v1 in local storage on this browser. It contains only your flashcard animation and keyboard-shortcut choices. It is shared by accounts using this browser and is not synchronized to other devices. Local storage has no automatic expiry; you can change these preferences in settings or remove them through your browser’s site-data controls.

When you choose to sign in, you visit the configured Keycloak identity provider. It uses its own essential authentication and security cookies on the sign-in domain. Cookie names and retention depend on the deployed Keycloak version and realm session settings. Ask the website operator for the inventory for that deployment.

There are no analytics or advertising cookies to switch on or off. You can reopen cookie details at any time. Change your language using the application’s language selector, or remove site cookies through your browser settings. Removing authentication cookies signs you out; blocking necessary cookies can prevent sign-in.

If optional tracking is introduced, it must stay blocked until you make an explicit choice. An updated interface must offer an equally accessible way to refuse optional cookies, choose categories and withdraw consent. Dismissing this notice does not authorize future trackers.

Who operates this website?

Why cookies are used

Application cookie inventory

Learning preferences in browser storage

Sign-in provider

Your choices