Cookie Policy
Last updated 21 September 2026
Ernoxa sets only strictly necessary cookies: the ones that keep you signed in and protect sign-in. There are no advertising, analytics or tracking cookies, so there is nothing to consent to or turn off.
1. The cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
| ernoxa_at | Keeps you signed in (short-lived access token). | 15 minutes |
| ernoxa_rt | Renews your session without asking you to sign in again. | 30 days |
| ernoxa_mfa | Remembers that your password was correct while you enter your two-step code. | 5 minutes |
| ernoxa_google | Protects Google sign-in against forged requests. | 10 minutes |
| ernoxa_admin_at | Staff only: keeps an administrator signed in. | 2 hours |
| ernoxa_admin_step | Staff only: the step between password and code. | Up to 15 minutes |
2. How they are protected
All of them are first-party, marked HttpOnly so no script on the page can read them, sent only over HTTPS, and limited so other sites cannot use them to act on your behalf. Signing out removes them.
3. Partner sites
When you open an opportunity you go to the partner’s own site, which may set its own cookies under its own policy.