Legal
Cookie Notice
Last updated: [DATE]
SOPR uses exactly one cookie. There is no tracking, analytics, or advertising technology in this application — nothing to opt in or out of beyond what's described below.
Cookie name
Purpose
Duration
connect.sid
Keeps you signed in between page loads. Strictly necessary — no consent required. First-party only, never shared with a third party.
12 hours, or until sign-out
Why there's no cookie-consent banner
Cookie-consent banners exist to get permission for non-essential cookies — analytics, advertising, personalization tracking, and similar. Strictly necessary cookies, which this one is, are explicitly exempt from that requirement, because the application cannot function without it. SOPR does not use any cookie that would require consent in the first place.
Technical detail
- HttpOnly — invisible to and unreadable by any JavaScript running on the page, blocking a common cookie-theft technique
- SameSite=Lax — not sent along with requests originating from other websites, helping prevent cross-site request forgery
- Secure (over HTTPS) — never transmitted in plain text
- Cryptographically signed, so it cannot be forged or tampered with
Questions
[CONTACT EMAIL]