Best practices 

• Familiarize yourself with the regulations in your country or for your organization.
• Consider professional legal advice for the text in the cookie warning bar and cookie policy.

As the necessary cookies apply only to logged-in users, they are mostly relevant for publicly accessible sites that require visitors to log in. Website visitors who do not log in do not have to consent to the use of these cookies.

A device cookie is set on a browser IF AND ONLY IF the user has successfully authenticated themselves by logging in or completing a password reset. Device cookies enable additional IT security (improving account security while preventing denial-of-service attacks) and, therefore, fall under legitimate interest of GDPR.

The device cookie must contain the username so it can be used to identify the user. It is also stored with the username in the database in case of a failed login attempt.

The device cookie remains in the browser even after the user has logged out or after a password reset when the user has not logged in.

Another user sharing the same browser profile can see this cookie and identify the username of the user who last logged in.

Necessary cookies 

For information on configuring and enabling cookie warnings in Fotoware, see Configuring cookie warnings.