Cookie policy
This page explains the small files and browser storage Palmus may use. We prefer a restrained approach: essential functions first, optional measurement only when permitted, and no cookie-based health profiling. It applies to all pages on the Palmus website and is read together with the privacy policy, which explains how personal data is handled more generally. Palmus does not use cookies for advertising, retargeting or social media tracking.
1. What cookies do
Cookies let a site remember a browser choice or maintain a secure session. They do not reveal a person’s identity by themselves. A cookie is a small text file stored by your browser, while related browser storage works in a similar way but is held under different technical rules. Both can be viewed and removed from your browser settings at any time. When a cookie is combined with other data it can sometimes help recognise a returning browser, which is why we keep the list short and explain each item. Cookies can be first-party, set by Palmus itself, or third-party, set by another provider whose service is loaded on the page. They can also be session cookies, which disappear when you close the browser, or persistent cookies, which remain until they expire or you delete them. On this site the list of items is short enough to be read in full below.
- (a) First-party items are set by the Palmus domain.
- (b) Session items end when the browser closes; persistent items have a stated lifespan.
2. Essential cookies
Essential mechanisms support navigation, security and form handling. They are used because the site cannot function reliably without them. They do not need your consent under ordinary practice because they are not used to measure or profile readers. Blocking them in your browser may cause the contact form or the cookie banner to behave unexpectedly. The legal basis for these items is our legitimate interest in operating a secure website, and they are not used for any other purpose. They are not linked to your name or email address, even when you submit the contact form in the same session.
- (a) palmus_session: a random session identifier that supports the contact form and basic security checks. It is removed when you close the browser.
- (b) Technical security tokens from our hosting or security filtering provider, which usually last for the length of a visit.
- (c) Essential items are never used to build a reading history or to infer health interests.
3. cookieChoice
The browser key cookieChoice records accept or reject for up to 12 months. It can be deleted through browser settings. It stores only the word accept or reject and the date of your choice, and it contains no name, email address or device fingerprint. If you delete it, the banner will appear again on your next visit and we will treat you as undecided. Clearing it does not remove any message you have sent us. The item remains on your device only, and the banner reads it on each page load so that you are not asked repeatedly. If you reject optional cookies, the rejection is stored in the same way so that your decision is respected without further prompts during the period.
- (a) Name: cookieChoice.
- (b) Purpose: remembers whether optional cookies were accepted or rejected.
- (c) Lifespan: up to 12 months.
4. Analytics
Optional analytics, where enabled, measures aggregate page use with a maximum 13-month setting. It is not intended to infer medical conditions. When it is switched on, it reports totals such as page views, approximate region and device type, and we review those totals to see which explainers are read and where navigation is unclear. The analytics identifier is named palmus_ma and is set only after you choose accept. We do not combine it with contact form data, and we do not share it with advertisers. Reports are viewed at the level of pages and groups of readers, and individual browsing paths are not examined. Where the measurement tool offers a setting to shorten IP addresses, we use it, and approximate region is derived before the address is discarded. If you reject optional cookies, the measurement tool does not load, and your visit does not appear in the totals. The legal basis for analytics is your consent, which you can withdraw at any time.
- (a) Name: palmus_ma, set only after accept.
- (b) Purpose: counts page views and approximate region in aggregate form.
- (c) Lifespan: up to 13 months.
5. Consent
The banner lets you accept or reject optional cookies. Rejecting does not block ordinary reading or contact access. The accept and reject options carry equal visual weight, and no optional cookie is set before you decide. You can change your choice later by clearing cookieChoice in your browser or by asking us through the contact page. We may ask again after 12 months or after a material change to this policy. Consent is specific to the optional measurement described in section 4, and it is not treated as agreement to anything else. You do not need to give a reason for rejecting, and rejecting has no effect on which articles you can read. Where you ask us to reset your choice, we confirm in writing once the banner will appear again.
- (a) Accept and reject are presented together and in the same size.
- (b) Withdrawing consent is as easy as giving it.
6. Browser controls
Most browsers let you block, delete or limit cookies. Some preferences may need to be repeated on another device. Settings are usually found under privacy or security in the browser menu, and many browsers also offer a private window that discards cookies at the end of a session. Browser and device combinations differ, so a choice made on your phone will not carry across to your laptop. If you block all cookies, you can still read every article on Palmus. Some browsers also provide a signal asking sites not to track the visitor; Palmus does not run optional measurement before you choose, so the signal does not change what is set. Extensions that remove scripts or cookies may hide the banner, in which case no optional item is set at all.
- (a) Block or allow cookies for palmus sites only.
- (b) Delete existing cookies after each browser session.
- (c) Review stored items for individual cookies and remove those you do not want.
- (d) Use a private window if you prefer that nothing is kept after you close it.
7. Third parties
Technical providers may place strictly necessary identifiers under contractual instructions. Advertising cookies are not required for the editorial service. These providers are limited to hosting, network security and, where enabled, aggregated measurement. They may not use the identifiers for their own marketing and must delete them within the retention periods we set. If this changes, we will update this page, show a notice and request consent before any new optional cookie is used. Some providers operate servers outside Indonesia, so identifiers may be processed in other countries under written terms that require protection comparable to Indonesian rules. Embedded external media, such as videos or maps, are not used on the editorial pages; if one is added, it will be listed here before it loads.
- (a) Hosting and delivery: strictly necessary technical identifiers only.
- (b) Network security filtering: short-lived tokens that protect forms from abuse.
- (c) Measurement, where enabled: aggregate totals under the palmus_ma setting.
8. Retention
Cookie choice lasts up to 12 months; security records generally last 90 days. Aggregated reports may remain without direct identifiers. The session cookie palmus_session ends when the browser closes, and the optional analytics identifier is capped at 13 months. Security records may include IP addresses and are deleted on a rolling basis after 90 days unless an investigation is open. Aggregated reports contain totals only, so keeping them does not create a personal profile. Backups that contain security records are overwritten in the normal backup cycle, which means a deleted item may remain in an archive for a short further period before it is removed. If you ask us to delete data connected with a cookie, we confirm in writing what was removed and what, if anything, must be kept for legal reasons.
- (a) palmus_session: browser session.
- (b) cookieChoice: up to 12 months.
- (c) palmus_ma: up to 13 months, optional.
- (d) Security logs: 90 days.
9. Questions
Ask about a cookie through contact.php or call +62 813 9587 4123. We can explain its purpose and expected lifespan. Written questions are acknowledged within five business days, and we aim to give a full explanation within 30 calendar days. Telephone enquiries are taken Monday to Friday, 09:00 to 17:00 Western Indonesia Time. If you believe a cookie has been set without a valid reason, tell us the page and browser used so that we can check it. Letters may be sent to Palmus, Jl. Raya Cilandak KKO No.17, RT.1/RW.5, Ragunan, Ps. Minggu, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12560, Indonesia. If you are not satisfied with our reply, you may raise the matter with the Indonesian authority responsible for personal data protection.
- (a) Include the page address, your browser and the name of the cookie, if you can see it.
- (b) A written reply states what the cookie does, how long it lasts and how to remove it.
10. Change log
This edition was published on 5 October 2026. The prior explanation was consolidated on 1 July 2026 to clarify optional measurement. Each edition is dated at the top of this page, and meaningful changes are listed here so that you can see what moved. Earlier editions are kept on file for 36 months and can be provided on request. If a change adds a new optional cookie, the banner is shown again so that you can decide afresh. Minor wording fixes that do not change what is set on your device are not listed individually.
- (a) 1 July 2026: optional measurement and consent wording clarified.
- (b) 17 August 2026: cookie names and lifespans listed individually.
- (c) 5 October 2026: browser controls, third-party limits and contact timings described in more detail.