Cookie policy
Version 2026-11-01
Draft, not yet in force. This version is waiting for legal review and may change.
ACE (the Service) uses cookies and browser storage only to sign you in, keep you secure and remember choices you make. It uses no analytics, advertising or third-party tracking cookies, and loads no third-party scripts.
What we set
The table lists every cookie and storage key the Service sets. It is built from the Service's own cookie registry, so it changes when the code does.
| Name | Kind | Category | What it does | Kept for |
|---|---|---|---|---|
c3ace.session_token | Cookie | Necessary | Keeps you signed in. | 7 days, renewed while you use the product |
c3ace.session_data | Cookie | Necessary | An encrypted copy of your session so pages load without asking the database each time. | 30 seconds |
c3ace.two_factor | Cookie | Necessary | Remembers that you passed your password while you enter your second factor. | Until you finish signing in, at most 10 minutes |
c3ace.trust_device | Cookie | Necessary | Set only when you tick "Trust this device": skips the second factor on this browser. | 30 days |
c3ace.<sign-in step> | Cookie | Necessary | Short-lived cookies the sign-in library sets during a Microsoft sign-in to protect it against forgery. | Until the sign-in finishes, at most 10 minutes |
c3ace.handoff_intent | Cookie | Necessary | Carries a sign-in from the platform's address back to your provider's own web address. | 10 minutes |
c3ace.brand | Cookie | Necessary | Shows your provider's name and logo on the sign-in page after you open its sign-in link. | 180 days |
c3ace.support | Cookie | Necessary | Limits a support session that a partner allowed to the pages it covers. | Until the support grant ends, at most 4 hours |
c3ace_density | Cookie | Preference | Remembers the table density you chose. | 1 year |
c3ace_desk_groups | Cookie | Preference | Remembers which groups you folded on the service desk. | 1 year |
c3ace.brand.<organisation> | Local storage | Necessary | Your provider's name, colours and support address, so a page that can't load still says who to contact. | Until you clear it |
theme | Local storage | Preference | Remembers the light or dark theme you chose. | Until you clear it |
portal-sharing-dismissed:<organisation> | Local storage | Preference | Remembers that you closed the customer portal banner. | Until you clear it |
estate-gaps-hidden:<customer> | Local storage | Preference | Remembers whether you folded the coverage gaps on the estate page. | Until you clear it |
c3ace.agent-how.<agent> | Local storage | Preference | Remembers whether you opened or closed How this agent works on an agent's page. | Until you clear it |
c3ace.estate-note.<customer> | Session storage | Preference | Remembers that you closed the note in the corner that shows a new estate being mapped. | Until you close the tab |
c3ace.estate-ready.<customer> | Local storage | Preference | Remembers that you opened or put off the prompt to open a newly mapped estate, so it shows once. | Until you clear it |
ace-invite-<…>, ace-step-link-<…>, ace-wizard-<…> | Session storage | Necessary | Keeps your place and the links you just made while you set up a customer. | Until you close the tab |
Form drafts (federated-start:<…>, c3ace.putBack.<…>) | Session storage | Necessary | Keeps what you typed in a form, or what you took out of a proposal, if the page reloads. | Until you close the tab |
c3ace.consent | Cookie | Necessary | Remembers your cookie choice. Set only if the product ever asks for consent. | 6 months |
Necessary cookies make sign-in and security work, so they can't be switched off. Preference cookies remember a choice you made, such as table density or the theme, and are set only when you make that choice.
Your choices
Because the Service sets only necessary and preference cookies, it doesn't ask for cookie consent. If it ever adds a cookie of another kind, it will ask first, with equal Accept and Reject buttons, and you can change your choice here at any time.
You can also delete cookies in your browser's settings. Deleting the session cookie signs you out.
More
How we handle personal data: /legal/privacy-policy. Questions: privacy@spektrasystems.com.
Version 2026-11-01.