01

Cookie policy

This policy precisely describes the cookies and local-storage mechanisms used by ibcsc.be, their purpose and duration, and the choices available.

Last updated · 18 August 2026

01

Controller and scope

The website operator and controller is the Institut Belge de Cybersécurité Citoyenne ASBL, Rue André Lafaille 6, box 012, 6031 Monceau-sur-Sambre, enterprise number 1039.889.191, info@ibcsc.be. This policy applies to ibcsc.be and its forms, accounts and publishing services.

02

Definitions

A cookie is a small file or identifier stored by the browser and returned to the website on later requests. Similar technology such as browser local storage can remember information without automatically sending it to the server. Cookie rules cover both cookies and comparable mechanisms.

03

ibcsc_session cookie

The ibcsc_session cookie is created when a user requests a service requiring a secure session: opening a protected form, creating or using an account, signing in, publishing, applying or accessing the back office. It links requests to a session, protects CSRF tokens and helps prevent fraudulent submissions.

  • Provider and domain: ibcsc.be, first-party cookie
  • Duration: browser session; removed on sign-out where applicable
  • Category: strictly necessary functional and security cookie
  • Attributes: Secure, HttpOnly and SameSite=Lax
  • Content: random session identifier; no plain-text password
04

Legal basis and consent

The session cookie is strictly necessary to provide and secure a service expressly requested by the user. Prior consent is therefore not required under Belgian cookie rules. IBCSC nevertheless informs users before activating the relevant features and allows public pages to remain available without a session.

05

ibcsc_cookie_preference local preference

The browser stores the banner choice locally under the key ibcsc_cookie_preference. The value contains the accepted or refused choice and the time it was saved. It is used only to avoid displaying the same notice on each visit and to adapt links to services requiring a session.

  • Storage: browser local storage, not a cookie sent with every request
  • Maximum duration: six months
  • Access: limited to ibcsc.be in the browser concerned
  • Transmission: the local preference is not automatically sent to the server
06

Refusal and consequences

Choosing “Continue without cookies” removes any existing IBCSC session and leaves public pages available. Protected forms, registration, sign-in and account functions cannot work without the session cookie because security protections and session state cannot be maintained.

  • No effect on public information pages
  • Form and account features unavailable without a session
  • The cookie may be enabled later by opening a relevant service
07

No commercial tracking

The website sets no advertising, social-network, profiling or audience-measurement cookies and does not combine browser information with data from other websites for commercial purposes. For the security and operational monitoring described in the Privacy policy, the website records visits and queries a third-party IP-geolocation service; that monitoring uses no cookie and relies on a simple session marker in the browser, which is not sent automatically with every request and disappears when the tab is closed.

08

Management and deletion

You may delete the session cookie and local preference in browser settings. Deleting the preference causes the notice to reappear on a later visit. Deleting the session cookie may interrupt an ongoing form or sign the account out. Browser and device menus differ.

09

Technical data distinct from cookies

Independently of cookies, the server may process the IP address, date, time, requested page, server response and some browser information. These logs support security, availability, diagnostics and abuse prevention. Their processing is explained in the Privacy policy.

10

Future cookies

If IBCSC introduces a non-essential cookie, including analytics or third-party cookies, it will be activated only after full information and, where required, prior, freely given, specific, informed and withdrawable consent. This policy and the choice interface will be updated before use.

11

Your rights and contact

Where a cookie or technical log involves personal data, the rights in the Privacy policy apply. Questions may be sent to info@ibcsc.be. A complaint may be lodged with the Belgian Data Protection Authority.