01Sign-in cookies
These are set only when you sign in or use the sign-in form. The site can't keep you signed in without them.
- authjs.session-token: keeps you signed in. Expires after 8 hours.
- authjs.csrf-token: protects the sign-in form from forged requests. Cleared when you close the browser.
- authjs.callback-url: remembers which page to return you to after signing in. Cleared when you close the browser.
On the live site these names start with __Secure- or __Host-, which means the browser only sends them over HTTPS.
02Preference cookies
- portal-sidebar: remembers whether you collapsed the portal sidebar. Kept for one year and only sent to /portal pages.
03Third parties
The sign-in and sign-up pages load Google reCAPTCHA, which may set the _GRECAPTCHA cookie and read device and browser information to tell people from bots. It's covered by Google's Privacy Policy and Terms. Without it, those forms can't be submitted.
Fonts are served from this site, not from Google. Links to our social media pages take you to those platforms, which have their own cookie policies.
04Managing cookies
You can clear or block cookies in your browser settings. If you block sign-in cookies you can still browse the site, but you won't be able to sign in. Questions go to taakra@ucp.edu.pk.
