Cookie policy
Draft of 24 September 2026.
Draft pending legal review
This text describes how MothiOS works today, but it has not yet been reviewed by a lawyer or approved. It is not the final version and may change before it is published.
1 item still needs to be confirmed, marked in the text as PENDING.
1. What cookies and browser storage are
Cookies are small files that a site stores in your browser and that the browser sends back on each visit. Besides cookies, a site can store data in browser storage (local storage, session storage and the application cache). For the purposes of this policy we treat them the same way: we explain everything MothiOS stores on your device.
2. What MothiOS stores in your browser
MothiOS only stores in your browser what the platform needs to work and what you yourself ask it to remember. It does not use analytics, advertising or third-party cookies.
- Session: two protected cookies, which the page's code cannot access, that keep you signed in and renew your session. They are deleted when you sign out.
- Preferences: the language, the light or dark theme, how you left the side menus and the last workspace you visited.
- Your cookie choice: we store what you chose and when, so we do not ask you again.
- Recent searches: the last ten records you opened from the search box, so you can return to them with one click. They may include the name of a company or a contact.
- Drafts: if you are editing an order or creating an incident and leave without saving, what you have written so far (order lines, notes, incident details) is kept in your browser so you do not lose it. Only the user who wrote it can see it, it is discarded after 24 hours and it is not sent to the platform until you press save. It does not include photos or attachments.
- The vehicle or frame you are working with in Aftersales or Production (VIN and model), while the tab is open.
- Application cache: the portal keeps temporary copies of its files, of pages and of some recent platform responses, to load faster and keep working if the network fails. Those responses may contain customer, order or vehicle data. Incidents, aftersales queries, attachments, job applications and people-area data are never cached.
When you sign out, the session cookies and all local storage are deleted (preferences, recent searches, drafts and your cookie choice, which you will be asked for again). Session storage is deleted when you close the tab. The platform responses stored in the application cache are deleted too; the portal's files and pages, which do not carry your data, are kept so that it opens without a network. If the session expires without signing out, those responses stop being used 8 hours after the session was last checked and are deleted the next time the portal is opened. On a shared device, we recommend signing out and clearing the site data from the browser.
The technical details, with the exact name of each item, are in the table at the end.
3. Requests to third parties from your browser
When you open the fleet map, your browser requests the map images directly from OpenStreetMap's servers, a third party. In doing so, those servers receive your IP address and the map area you are viewing. [PENDING: confirm whether those servers store anything in your browser and how this transfer is classified].
When an error occurs, the portal sends a technical report to Sentry, our error tracking provider. It does not set cookies, does not record browsing and is configured not to identify you.
Fonts are served from our own servers: your browser does not connect to Google to load them.
4. How to manage your consent
The first time you visit, we show you a notice with three equally visible options: accept all, reject non-essential or configure.
Today there is only one optional category, analytics, and it is empty: MothiOS does not load any analytics tool. If one is added in the future, it will only be enabled if you accept it, and we will ask you again.
The essentials (session, preferences, drafts and application cache) cannot be turned off from the notice because the platform does not work without them or because you asked for them. You can delete them at any time from your browser settings, although you will have to sign in again.
You can change your choice at any time from the "Cookie preferences" link in the page footer.
5. Changes to this policy
If we change what we store in your browser, we will update this policy. If the change affects what requires your consent, we will ask you again.
Technical details: cookies and storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
| __Host-emethra_session (emethra_session) | Essential cookie | Keeps you signed in. Protected: the page's code cannot read it. | 8 hours by default, or until you sign out |
| __Host-refresh_token (refresh_token) | Essential cookie | Renews the session without asking for the password again; changes on every use and can be revoked. Protected: the page's code cannot read it. | 30 days, or until you sign out |
| NEXT_LOCALE | Preference cookie | Remembers the chosen language. | 1 year |
| last_workspace | Preference cookie | Remembers the last workspace visited. | 30 days |
| localStorage: mothios-theme · mothios-sidebar-collapsed · mothios-sidebar2-mode · flota-mini-panel-expanded | Local storage, preference | Light or dark theme and state of the side menus and panels. | Until you sign out |
| localStorage: mothios-cookie-consent | Local storage, essential | Your cookie choice and the date you made it. | Until you sign out or the consent categories change |
| localStorage: mothios-recent-searches | Local storage, preference | The last ten records opened from the search box (may include company or contact names). | Until you sign out |
| localStorage: mothios-borrador:* | Local storage, functional | What was written in an order or a new incident without saving, only for the user who wrote it. | 24 hours, or until saved, discarded or you sign out |
| sessionStorage: posventa.vehiculoActivo · produccion.bastidorActivo | Session storage, functional | The vehicle or frame being worked on (VIN and model). | Until the tab is closed |
| Cache Storage: static-assets · api-semi-static · api-sensitive · api-get · pages | Application cache, functional | Portal files, pages and recent platform responses, to load fast and work without a network. Never includes incidents, attachments, job applications or people data. | Files: 30 days. Pages: 7 days. Responses: 5 minutes to 24 hours; deleted when you sign out and not used after 8 hours without checking the session. |