COOKIE POLICY — 1o2

https://1o2.it · Updated: 2 October 2026

Controller: VISIBILITY S.L.U. · NIF B76194323

Calle Domingo J. Navarro n.1, 2a planta - Oficina 5, 35002 Las Palmas de Gran Canaria, Spain.

1. NECESSARY TOOLS ONLY

The current application uses only cookies and local storage needed for requested functions: access, language and work recovery. It includes no advertising cookies, Analytics or remote fonts. These technical purposes do not require consent. Closing “Cookies & privacy” does not authorise any additional purpose.

2. INVENTORY

Provider of the following first-party tools on 1o2.it: VISIBILITY S.L.U.

• isu_session — cookie set after ISU login, maintaining a signed session without the password. Path /isu, HttpOnly, Secure, SameSite=Strict. Up to 8 hours; removed by logout.

• hybrix_session — cookie set after HYBRIX login, maintaining a signed session without the password. Path /hybrix, HttpOnly, Secure, SameSite=Strict. Up to 8 hours; removed by logout.

• 1o2-language — localStorage for the homepage language explicitly selected (it, en, es). No automatic expiry; removed by selecting Automatic or clearing site data.

• isu-cloud-draft-v1 — localStorage containing the unsynchronised plan and revision to prevent lost work. Removed after successful saving or reloading with the draft discarded. On error or conflict it remains until resolved or manually cleared.

• isu-cloud-migrated-v1 — localStorage marker preventing repeated import of a legacy local plan. No automatic expiry; remains until site data are cleared.

• isu-planner-v1 — possible legacy local plan, read for migration. The current code does not automatically remove it; it remains until manually cleared.

LocalStorage is not sent with every request. Drafts may contain project information: use authorised devices/browser profiles. Logging out ends the session but does not automatically remove local copies.

3. ICHEF AND INFRASTRUCTURE

The homepage loads the information component and configuration from https://ichef.it, operated by VISIBILITY. In this necessary-only configuration, it creates no vp_choice key and sends no consent receipts. You can reopen the panel or follow the policy links at any time.

Sites/OpenAI and Cloudflare provide hosting and technical protection. Any infrastructure tools depend on the functions actually provided and the suppliers’ configuration. References: https://openai.com/policies/cookie-policy/ and https://www.cloudflare.com/cookie-policy/.

4. MANAGEMENT

Change language on the homepage, log out of restricted areas, or clear cookies and local storage in browser settings. Removing or blocking session cookies prevents persistent login. Before clearing local storage, check that the plan is synchronised or download a copy: unsaved drafts may be lost. Clearing the browser does not delete a plan already stored on the server; contact the project controller for this.

There are no optional services to accept or reject in the current setup. If added, the inventory, prior blocking and choice collection must be updated where required.

5. PERSONAL DATA AND RIGHTS

See https://1o2.it/privacy?lang=en for purposes, legal bases, server retention, recipients, transfers and rights. Contact: hello@visibility.company. Supervisory authority: https://www.aepd.es/.