Cookie Policy

Version 2026.09 · Effective 1 September 2026

1. What we use

EDUFIN uses cookies and similar storage that are necessary to operate a secure logged-in service. We also store a preference when you accept this banner so we do not ask on every visit.

2. Necessary cookies

• Session cookie — keeps you signed in, holds MFA completion for the session, and protects forms against cross-site request forgery. It is HttpOnly, SameSite=Lax, and Secure on HTTPS. It expires according to the configured idle timeout.
• edufin_cookie_ok (browser local storage) — records that you have seen and accepted the cookie notice. It is not used to track you across other sites.

3. What we do not do

We do not use third-party advertising cookies. We do not sell cookie data. Fonts may be loaded from Google Fonts on public pages; that is a third-party request governed by Google’s policies. You can block third-party requests in your browser; the portal remains usable.

4. Email

Transactional email (invites, password, MFA, and stage notices) is not a cookie. Stage notices can be muted in Settings. Invites and security emails cannot be muted.

5. Managing cookies

You can delete cookies in your browser. If you delete the session cookie you will be signed out. If you delete the cookie preference we will show the notice again. Necessary cookies cannot be disabled if you wish to use the portal.

6. Contact

Questions about cookies are handled with privacy requests under the Privacy Policy. This policy forms part of the governance bundle you accept before using EDUFIN.