Cookie Policy

1. Who is responsible for cookies?

The controller responsible for the use of cookies on this site is Attentia.

You can reach us via the contact details in our Imprint and by email at zach@attentia.at.

If we use third-party tools that set cookies (for example privacy-friendly analytics or error monitoring), those providers act as processors or as separate controllers, depending on the integration. We choose privacy-respecting services and, where required, conclude appropriate data processing agreements.

2. What types of cookies we use

We distinguish between essential (strictly necessary) cookies and optional cookies (such as analytics cookies). Some technologies that perform similar functions (for example localStorage) are treated in the same way in this Policy.

Some cookies are necessary to provide the Service you request (for example, to keep you logged in during ADHD tests). Others are optional, such as analytics cookies that help us understand how people use Attentia so we can improve it.

3. How cookies relate to ADHD tests and health data

Attentia is designed for ADHD-related tests and may process data that is health-related or otherwise highly sensitive (for example, gaze metrics, prosody features and video recordings linked to tasks). Cookies themselves are typically not health data, but they can be linked to test sessions that contain such data.

We therefore minimise the use of cookies and similar technologies, collect only what is necessary for security and functionality, and use optional analytics only with your prior consent.

4. Categories of cookies and similar technologies

4.1 Essential (strictly necessary) cookies

These cookies are required for the Service to function properly. Without them, Attentia cannot provide secure, stable ADHD testing. We use essential cookies and similar technologies to:

• create and maintain secure login sessions;
• route requests reliably between front-end and back-end;
• apply security protections (for example CSRF protection);
• store your cookie choices and privacy preferences;
• prevent obviously abusive or repeated use that could distort research data.

Examples include:

• sb-[project-ref]-auth-token – Supabase authentication cookies that keep you logged in securely.
• attentia_csrf – protects against cross-site request forgery (if implemented as a cookie).
• attentia_cookie_consent (or a similar key stored in localStorage) – stores your cookie consent choices.

4.2 Analytics cookies (optional)

Analytics cookies help us understand how people interact with Attentia so we can improve the clarity of instructions, the flow of ADHD tests, completion rates and accessibility. Where we use analytics, we choose providers that focus on privacy and avoid building detailed advertising profiles.

We do not use analytics cookies for advertising, retargeting or selling data. Analytics cookies are only set with your consent via our cookie banner or cookie settings.

5. Supabase and other back-end services

We use Supabase as our primary back-end platform and authentication provider. Supabase sets its own essential cookies (such as authentication tokens) in order to keep you logged in, enforce security and connect your browser to your account and test sessions.

These Supabase cookies are treated as essential and cannot be switched off via our cookie settings, because the Service would not function without them. The underlying processing of personal data is described in more detail in our Privacy Policy.

6. How long cookies and related data are kept

Cookie lifetimes depend on their purpose. Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire or you delete them manually.

We keep ADHD test data and related health-sensitive data in line with the retention periods described in the Privacy Policy. Where possible, we delete or irreversibly anonymise data once it is no longer needed and only retain aggregated statistics and models to improve reliability, safety and usability.

7. Your choices and rights

When you first visit Attentia, we display a cookie banner that lets you choose between using only essential cookies and accepting all cookies, with a "Customize settings" option for granular control. You can change your choices at any time via the "Cookie settings" link in the footer.

Your rights under GDPR (for example access, rectification, erasure, restriction, objection, and withdrawal of consent) are described in detail in our Privacy Policy. You can contact us at zach@attentia.at to exercise these rights. You also have the right to lodge a complaint with the competent data protection authority.

8. Changes to this Cookie Policy

We may update this Cookie Policy from time to time, for example if we introduce new tools or change our use of cookies. The "Last updated" date at the top indicates the current version. If changes significantly affect your rights, we will inform you via the Service or by email where appropriate.