Foresight Cookie Policy
1. What are cookies and why are they used?
A cookie is a short text string sent to the user’s browser and, if necessary, is saved on the computer or mobile device, when you are using the Foresight Application (the “Application”) and is used to gather information on such access and usage. Some cookies are set by us and called first-party cookies. We also use third-party cookies, which are cookies from a domain different than the domain of the Application.
Cookies may be stored permanently on the user’s computer or mobile device and have a variable duration (persistent cookies) but may also disappear after logging out the Application or be of limited duration (session cookies).
2. Types of cookies used and purposes
- Strictly necessary cookies are necessary for the Application to function and for the security of the Application and cannot be switched off in our systems. You can block these cookies, but some parts of the site will not then work. These cookies do not store any personal identifiable information.
- Functional cookies is used only to maintain UI/navigation state, enable the Application to provide enhanced functionality and personalization. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
Performance cookies are used to gather information on how the Application is used. These cookies gather data such as Microsoft cookies. Board uses these cookies to analyze user activities and improve the Application functions.
- Security cookies process data for their own purposes, which are security and protective ones.
3. Cookies List
Cookie | Provider | Purpose | Category | Storage | Data Shared | Type of Cookie |
__RequestVerificationToken | Board.com | Protects against Cross-Site Request Forgery (CSRF) attacks by verifying that form submissions and state-changing requests originate from our Service | Strictly Necessary | Session | First-party | Security cookie to protect web applications from Cross-Site Request Forgery (CSRF) attacks. |
bearer | Board.com | Stores the access token issued when you sign in. Used to authenticate your requests to our API so you can access your account and protected features. | Strictly Necessary | Short-lived (typically minutes to hours) | First-party | Necessary for site security and operation |
refresh | Board.com | Stores a refresh token used to obtain a new access token when your session expires, so you remain signed in without re-entering your credentials | Strictly Necessary | Persistent | First-party | Keeps user signed in while refreshing access token |
ai_session | Microsoft Application Insights | Set by Microsoft Azure Application Insights to group telemetry events into a single user session. Helps us diagnose errors and understand user flows. | Analytics Performance | 30 minutes of inactivity | First-party These cookies remain in the system of the customer) | Data is typically pseudonymized, not anonymous. Microsoft may process data as a processor (EU → US transfer possible |
ai_user | Microsoft Application Insights | Set by Microsoft Azure Application Insights to assign an anonymous identifier so we can count unique users and measure usage trends over time. | Performance | 365 days | First-party These cookies remain in the system of the customer | Data is typically pseudonymized, not anonymous. Microsoft may process data as a processor (EU → US transfer possible |
4. Microsoft Application Insights
Microsoft Application Insights is an application performance management and analytics service provided by Microsoft Corporation. It is used to monitor the performance, reliability, and usage of the Application and to help identify, diagnose, and resolve technical issues.
What the browser sends to Microsoft when Application Insights is loaded.
When Application Insights is loaded and executed in the user’s browser, the browser may send telemetry data to Microsoft, which can include:
- IP address (which may be truncated or anonymized, depending on configuration)
- User-Agent string (browser type and version, operating system)
- Device and browser characteristics
- Pages visited and navigation events within the Application
- Timestamps, session duration, and interaction timing
- Error information (such as JavaScript exceptions or failed network requests)
- Performance metrics (for example, page load times and response times)
Application Insights may read or set cookies or similar identifiers (such as ai_session and ai_user) in the browser to associate telemetry events with a browsing session or a pseudonymous user identifier.
Purpose of the processing.
The collected data is used exclusively for:
- Monitoring the performance and availability of the Application
- Detecting and diagnosing technical errors and failures
- Improving stability, security, and user experience
- Producing aggregated and statistical reports on Application usage
The data is not used for advertising or marketing purposes.
What our server sends to Microsoft.
In addition to client-side telemetry, our servers may send technical and diagnostic information to Microsoft Application Insights, such as server-side request logs, response times, and error details. These data are used to correlate client-side and server-side events for troubleshooting and performance analysis.
Nature of the data and identifiers.
The cookies and identifiers used by Application Insights are intended to be pseudonymous and do not directly identify a user by name or email address. However, because online identifiers and telemetry data may still be considered personal data under applicable data protection laws, their use is subject to consent where required.
Data processing, transfers, and safeguards.
Telemetry data collected via Microsoft Application Insights may be processed by Microsoft as a data processor on behalf of Board. Data may be transferred to and processed in countries outside the European Economic Area, including the United States. Where such transfers occur, appropriate safeguards are implemented in accordance with applicable data protection laws (for example, Standard Contractual Clauses).
For more information on how Microsoft processes data in Application Insights, please refer to Microsoft’s privacy documentation:
https://learn.microsoft.com/azure/azure-monitor/app/data-collection
5. Managing Your Preferences
Please note that by disabling the cookies some personalised services may no longer be provided and some of the Application functions may not be usable. However, each browser is different, so consult the “Help” menu of your browser for instructions on how to change your cookie preferences. After this operation, however, some Application functions may not run correctly.
6. Contacts
The data collected through the use of cookies may be processed by employees and/or collaborators of Board, indicated as representatives for the processing of data under the authority of Board, in its capacity as Controller, or by the Processor, where appointed. The aforementioned data collected could also be processed by third companies providing various types of service to Board. The complete list of processors is constantly updated and is available on request by sending an e-mail to: [email protected]. The personal data will not be disclosed in any case.