Skip to main content

Cookie Policy

No tracking cookies Last updated: May 10, 2026

Summary

D-Pass uses three strictly necessary cookies for authentication (access_token, refresh_token, csrf_token). We use no tracking, advertising, analytics, or profiling cookies of any kind.

Strictly Necessary Cookies

These cookies are required for the platform to function. They cannot be disabled. No consent is required under Art. 5(3) of the ePrivacy Directive as they are strictly necessary for a service explicitly requested by the user.

access_token Strictly Necessary
Purpose: Authentication session token
Expires: 1 hour
Type: HttpOnly, Secure, SameSite=Strict
Domain: .d-pass.eu
Details: Contains a signed JWT. Never readable by JavaScript. Automatically refreshed by the refresh token.
refresh_token Strictly Necessary
Purpose: Silent session renewal
Expires: 7 days
Type: HttpOnly, Secure, SameSite=Strict
Domain: .d-pass.eu
Details: Allows seamless re-authentication without re-entering credentials within the 7-day window.
csrf_token Strictly Necessary
Purpose: Cross-Site Request Forgery protection
Expires: Session
Type: Secure, SameSite=Strict
Domain: .d-pass.eu
Details: CSRF token readable by JavaScript for inclusion in API request headers. Required for all state-mutating API calls.

Analytics & Marketing Cookies

✓

We do not use any analytics, marketing, retargeting, advertising, or third-party tracking cookies. There is no Google Analytics, Meta Pixel, LinkedIn Insight Tag, or equivalent on this platform.

Managing Cookies

Since we only use strictly necessary cookies, there is no opt-out mechanism for cookies on the D-Pass platform. Blocking these cookies will prevent you from logging in.

You can manage cookies in your browser settings. For guidance: aboutcookies.org.

Updates to This Policy

We may update this Cookie Policy. Changes will be reflected on this page with an updated date. Questions? Email privacy@d-pass.eu.

Questions about cookies or privacy?

We'll respond within 30 days as required by GDPR.

privacy@d-pass.eu