Cookies

Priora uses a small set of essential cookies. They keep you signed in and protect account actions from cross-site request forgery. We do not use analytics cookies, marketing cookies, or third-party trackers.

What we set

• sessionHTTP-only cookie holding your signed session token. Set after you sign in, valid for 7 days, then required to sign in again. Cannot be read by JavaScript.
• csrf_tokenHTTP-only cookie used to verify that mutating requests (POST/PUT/PATCH/DELETE) came from the Priora app and not a third party. Rotated on demand.
• csrf_token_clientNon-HTTP-only companion of csrf_token. The Priora client reads it and echoes the value in a header so the server can validate the request. It contains no personal data.

What we do not set

• No analytics cookies (no Google Analytics, no Plausible, no similar)
• No advertising or retargeting cookies
• No third-party embed cookies on the marketing site
• No cross-site tracking identifiers

Consent

All cookies we set are strictly necessary to operate the service, so no consent banner is required. If you sign out or delete these cookies from your browser, you will simply need to sign in again.

Contact

Questions about cookies: support@priora.space. See also our Privacy Policy and Terms of Service.