Last updated: April 2026
Cookies are small data files stored on your device by your browser. We also use browser local storage, which works similarly but is never sent with network requests. Both mechanisms are covered by this policy.
| Name | Type | Storage | Expiry | Purpose |
|---|---|---|---|---|
| dispmail_session | HTTP Cookie (HttpOnly, Secure, SameSite=Strict) | Matches mailbox lifetime (24 h default) | Authenticates you to your mailbox inbox after passcode entry. Without it, all inbox requests return 401 Unauthorized. | |
| godz_theme | Local Storage | Persistent until cleared | Remembers your dark/light theme preference across visits. Defaults to dark if absent. | |
| godz_lang | Local Storage | Persistent until cleared | Saves your language choice (English / Bahasa Indonesia). Auto-detected by timezone if absent. | |
| godz_currency | Local Storage | Persistent until cleared | Remembers your preferred display currency. Defaults to admin-configured currency if absent. |
We do use FingerprintJS (open source, v4) in-memory to generate a browser fingerprint for anti-abuse purposes (preventing the same device from generating multiple mailboxes). This fingerprint is processed in memory only and is never stored in a cookie, local storage, or our database beyond the abuse-check request.
The dispmail_session cookie is required for the core service to function. Under GDPR Recital 47 and ePrivacy Directive Art. 5(3), strictly necessary cookies are exempt from consent requirements — however, we still inform you about them and give you the choice. If you decline this cookie, you will not be able to log in to your mailbox.
Preference storage (theme, language, currency) is optional. If you choose "Necessary Only" or "Reject All", these preferences will not be saved — the app will use sensible defaults on every visit (dark mode, auto-detected language, configured currency). The service remains fully usable.
You can update your preferences at any time below. Changes take effect immediately.
You can also delete cookies at any time through your browser settings:
We operate under the EU General Data Protection Regulation (GDPR) and Indonesia's UU PDP No. 27 Tahun 2022. Strictly necessary cookies are processed under legitimate interest (GDPR Art. 6(1)(f)) and the ePrivacy Directive exemption. Functional cookies are processed only with your explicit consent (GDPR Art. 6(1)(a)).
Questions about cookies or data handling? Email us at [email protected]. We respond within 30 days per GDPR Art. 12.