Cookie Policy

Cookies are used for a single purpose: keeping signed-in users authenticated as they move between pages of the workspace. Nothing else on the site depends on cookies.

• Session cookies hold the login session after sign-in, so the workspace knows who is authenticated and which institute they belong to.
• Protection: these cookies are httpOnly (unreadable to page scripts), restricted by same-site policy, and sent over HTTPS in production.
• Lifetime: the access cookie is short-lived; the refresh cookie lasts up to the configured session period and is cleared on logout. Changing or resetting a password revokes other sessions.

• No analytics cookies (no Google Analytics or similar).
• No advertising or cross-site tracking cookies.
• No third-party marketing scripts that set cookies.

If this changes, this policy will be updated and, where required, consent will be requested first.

Blocking cookies in the browser will prevent sign-in, since the workspace cannot maintain a session without them. Language preference is stored locally in the browser (not in a cookie) and can be cleared through browser site-data controls without affecting anything else.