Skip to content
Sign in

Legal

Cookies

We store only what is strictly necessary to sign you in and to remember choices you make yourself. No analytics, no advertising and no tracking across sites, which is why there is no cookie banner. Everything below is set by us, Dober Security ApS; nothing is set by another company.

Last changed October 21, 2026
These pages may still change
Gelex has not launched yet. We may still adjust these pages before launch, for example once we have appointed our data protection officer. Every change is dated in the changelog at the foot of the page.

1. In the app and on this site

NameTypePurposeLasts
__Host-psCookieKeeps you signed in to the app. Secure and HttpOnly: page scripts cannot read it.Until you sign out, after 12 hours without use, or 30 days after sign-in at most (12 hours for staff)
themeLocal storageRemembers light or dark mode, if you choose one.Until you clear it
gelex-prefsLocal storageRemembers interface choices you make in the app.Until you clear it
gelex.sidebar.<user id>Local storageRemembers the sidebar's width and whether you closed it.Until you clear it
gelex.plane.<panel>.widthLocal storageRemembers how wide you made a side panel, such as the document or the law beside your work.Until you clear it
gelex.scrollSession storageRemembers how far down each page you were, so Back and reload return you there.Until you close the tab
gelex.library.recent.<user id>Local storageRemembers your last searches and the documents you opened in the Library, so you can return to them.Until you clear it
pk.model.<user id>Local storageRemembers the AI model you last picked.Until you clear it
code-langLocal storageRemembers the language you picked for code examples in the documentation.Until you clear it

2. On the sign-in page

Signing in runs on our own sign-in service (Keycloak), at auth.gelex.eu. It sets these cookies, all of them Secure and limited to the sign-in service:

NamePurposeLasts
AUTH_SESSION_IDTies together the steps of one sign-in. HttpOnly.Until you close the browser
KC_AUTH_SESSION_HASHLets the sign-in page check that it belongs to the same sign-in.60 seconds
KC_RESTARTLets a sign-in that timed out start again where it was. HttpOnly.Until you close the browser
KC_STATE_CHECKERProtects sign-in forms and error pages against forged requests. HttpOnly.5 minutes
KEYCLOAK_IDENTITYRemembers that you are signed in, so other parts of the service do not ask again. HttpOnly.Until you close the browser. The sign-in session behind it ends after 30 minutes without use, or 10 hours at most.
KEYCLOAK_SESSIONThe same sign-in session, readable by the sign-in page to notice when you sign out.As KEYCLOAK_IDENTITY
KEYCLOAK_LOCALERemembers the language you picked on the sign-in page, if you pick one.Until you close the browser

If you choose to sign in with Google or Microsoft, you are sent to their page, and their own cookie policies apply there.

3. Why we don't ask for consent

Danish law (the cookie order, BEK 1148/2011, § 3(3), implementing Art. 5(3) of the ePrivacy Directive) requires consent before information is stored on your device, unless the storage is strictly necessary to provide a service you asked for. Everything above is either needed to sign you in or stores a choice you made yourself, so it falls within that exemption.

4. No third parties

Our pages load nothing from other companies: fonts, icons and scripts are served by us. If we ever add statistics, they will be described here before they go live.

5. Your control

You can delete cookies and local storage in your browser at any time, or block them. You will then be signed out, and the choices above will be forgotten. Without cookies you cannot sign in. Questions: privacy@gelex.eu.

Changelog

  1. , version 1: First version.