Cookie policy
This page describes the small files and browser storage Evance may use to operate a readable, secure editorial website. It applies to visitors in Indonesia and elsewhere. We keep the approach limited: essential operation first, optional measurement only after a clear choice.
In this policy, the word cookie also covers similar technologies such as local storage and session storage in your browser. These items are small pieces of text that a website can store on your device. They are not programs, and they cannot read other files on your device. The policy sits alongside the privacy policy, which explains how any personal information is handled.
The legal footing differs by category. Essential items rest on our legitimate interest in keeping the site secure and working, and they are consistent with Law No. 27 of 2022 on Personal Data Protection, which allows processing that is necessary for the operation of a service. Optional items rely on your consent, which must be specific, informed and freely given. Where a visitor is located outside Indonesia, we apply the stricter of the two approaches in practice, so that a reader in another country sees the same choice.
1. Essential operation
Session cookies may support navigation and security. They normally expire when the browser closes. If a hosting provider uses a security token, it is used to detect abusive traffic and is not sold or used to create a marketing profile.
Essential items do not need consent because the site would not work safely without them. They are limited to remembering which page you were viewing, protecting forms from automated misuse and balancing traffic across servers. If you disable them in your browser, a form may fail to send or a page may reload unexpectedly. The table below summarises what may be set.
- (a) Session identifier, set by the hosting environment if a form or security check is used: lasts until you close the browser.
- (b) Security or load-balancing token from the hosting or content-delivery provider: lasts from a few minutes up to 24 hours.
- (c) Form protection token, if used: lasts for the length of the visit.
- (d) Request-routing identifier from the hosting provider: lasts up to one hour and holds no reader information.
- (e) None of the items above contain a name, an email address or a telephone number, and none are shared for marketing.
2. Choice record
The browser key cookieChoice records whether you selected Accept or Reject. It may remain for 180 days. This prevents the notice from appearing on every visit. Removing browser storage will cause the notice to return.
The value stored is a single word, accepted or rejected, along with the date it was set. It contains no name, email address or reader identifier and is not sent to advertising partners. The key is stored in your browser, so it is not shared between a phone and a laptop. After 180 days the notice appears again so that your choice can be refreshed. If you reject, the choice is respected for the same period.
Because the record is kept only in your browser, we cannot look it up on a server or change it for you. A reader who uses two browsers will see the notice once in each. The date stored with the choice lets the site decide when 180 days have passed, and nothing else is read from it. If a browser blocks storage entirely, the notice may reappear on each page; this is a limit of the setting and not a fault in your choice.
3. Analytics
Evance may use limited analytics in the future to understand aggregate page performance. Optional analytics will not load before consent. Measurement identifiers, if used, will have a maximum planned lifespan of 13 months and will not be combined with contact-form content.
At the time of writing, no optional analytics are active. If they are introduced, the notice will name the tool, say what it counts, such as page views, referring pages and approximate device type, and state whether IP addresses are shortened before storage. Measurement will be set up to report in aggregate, so staff see totals rather than the path of an individual reader. A typical identifier would be named like a short random code and expire after at most 13 months, with a shorter period preferred where the tool allows it.
Before any analytics tool is switched on, we would check where its servers are located, whether it allows data to be kept inside the Asia-Pacific region and whether it can run without cross-site identifiers. Raw measurement records would be kept for no longer than 14 months and then deleted or reduced to totals. Contact-form content would never be sent to a measurement tool, and staff would not use the figures to single out one reader. The dated log below would record the day a tool was introduced, so the change is visible.
4. Preferences
Preference storage may remember display choices such as a dismissed notice. These values are not required for reading. A preference cookie should last no longer than 180 days unless a shorter period is stated at the time of collection.
An example is remembering that you closed the cookie notice or chose a particular text layout, if such an option is introduced. These values are small, are stored only in your browser and are never used to build a reader profile. If preferences are not saved, the site still works, but you may be asked the same question again on a later visit. Removing a preference does not remove access to any page.
Preference items are checked at each annual review, and any that no longer serve a purpose are removed. They are not combined with the choice record or with any measurement identifier. If we introduce a setting that is helpful to some readers but not to others, such as a larger text option, it will be off by default and will store only the setting itself.
5. Browser controls
You can block or delete cookies through browser settings. Blocking essential storage may affect navigation or security, while rejecting optional cookies should not remove access to articles. Browser help pages explain controls for current versions.
In most browsers, the cookie controls sit under Privacy or Security in the settings menu. You can usually clear items for a single site, block third-party items only, or set the browser to clear everything when it closes. Private or incognito windows discard cookies when the window is closed, which means the notice may reappear each time. Some browsers also send a Global Privacy Control or Do Not Track signal, which we treat as a preference to stay with essential items only where technically practical.
Mobile browsers place the same controls in the app settings, often under Privacy or Site settings. After you delete items, the cookie notice will return on your next visit, which is expected. If you use a browser extension that blocks trackers, it may also block the choice record, and in that case the notice may appear repeatedly. The help pages of your browser vendor explain the exact steps for the version you use, as menus change between releases.
6. Third parties
Hosting and security providers may set technical identifiers under their own infrastructure. Evance does not authorize advertising cookies on editorial pages unless a future notice names them and provides a choice. External sites linked from Evance have separate practices.
The providers involved are of the kinds named in the privacy policy: a hosting company, a security and content-delivery service, and, only with consent, a measurement tool. Their identifiers are technical and are usually deleted within hours or days. We ask each provider to confirm that it does not use these items for its own advertising. Embedded content such as maps or videos is not placed on editorial pages by default, because it would bring in the cookies of the external service.
Technical items set by providers may be handled on servers outside Indonesia. Where that happens, we ask the provider to apply protections comparable to those in Indonesian law and to limit use to running the service. We do not allow a provider to use these identifiers to build advertising profiles or to sell them. If you follow a link to another website, its own cookie notice applies from that moment, and you should read it before accepting anything there.
7. Mobile and shared devices
Cookie choices are stored by browser and device, not necessarily by person. On a shared device, another visitor may see the choice already made. Clear local storage if you want to reconsider it.
This is also relevant for a gym computer, a library terminal or a family tablet. If you decline optional items on a shared device, that choice applies to everyone who uses the same browser profile until it is cleared. When using a public computer, it is sensible to use a private window and to sign out of any accounts. We do not attempt to link browsers belonging to the same person.
If you realise afterwards that you accepted optional items on a computer you do not own, clear the site data for Evance in that browser, or ask the owner to do so. Nothing on the site stores a password, so there is no sign-in to leave open. A short visit to a public terminal leaves only the items described in this policy, and the essential ones expire when the browser closes.
8. Consent withdrawal
To withdraw optional consent, select Reject if the banner is visible or clear cookieChoice and reload the page. You can also contact Evance at +62 817 9345 1820 for help understanding the options.
Withdrawal takes effect from the moment you choose Reject or clear the stored choice, and optional items already stored by your browser should then be deleted by you or by the browser. Information gathered before withdrawal remains lawful, but it is not used for new purposes. A phone request is handled during business hours, and we will confirm by the same route what has changed. Withdrawing consent is as easy as giving it and does not require a reason.
- (a) Banner visible: select Reject and the optional items stop loading at once.
- (b) Banner not visible: clear the cookieChoice key in your browser data and reload the page.
- (c) Need help: call during business hours or write to the postal address in section 10, and we will explain the steps for your browser.
9. Retention and review
Cookie settings are reviewed at least annually. This page was reviewed on 1 October 2026. If a new category, provider or lifespan is introduced, we will update this page before enabling it where consent is required.
Changes are recorded in a dated log. A review may result in removing items we no longer need, shortening a lifespan or adding a clearer description.
Each review looks at three questions: whether an item is still needed, whether its lifespan can be shorter, and whether the description on this page matches what a browser actually shows. Review notes are kept for 36 months so that earlier decisions can be explained. If a change would affect optional items, the updated page is published before the change takes effect, and the choice notice is shown again so that you can decide afresh.
- 1 January 2026: first version, covering essential items and the choice record.
- 1 October 2026: annual review; lifespans confirmed and wording on shared devices and browser controls expanded.
10. Questions
Write to Jalan Anggrek Raya No. 15, Kemang, Jakarta Selatan 12730, Indonesia. Tell us which browser, device and approximate date you are asking about, but do not send passwords or sensitive health information.
We acknowledge questions within five business days and aim to respond in substance within 30 days. If your question concerns a specific item you can see in your browser, a screenshot of the name and expiry date is helpful, though it is not required. For rights over personal information more generally, see the privacy policy, which explains access, correction and deletion.
If you are not satisfied with an answer, you can ask for a second review by a different member of staff, which we complete within 30 days. You may also raise a concern with the Indonesian authority responsible for personal data protection. Questions sent by telephone to +62 817 9345 1820 are noted in writing, and we keep that note for 24 months in line with the privacy policy.