In brief
The application does not use first-party advertising or behavioral analytics cookies. Current identifiers support login, security, language, theme and optional Google flows.
What cookies and similar technologies are
Cookies are small files stored by a browser to remember information between requests or visits. Browser session storage serves a similar purpose but is normally cleared when the tab is closed.
This policy covers the Start4Me application and customized instances operated for client institutions.
Current inventory
The table below reflects the application code on the date of this update:
| Name or key | Purpose | Duration | Category |
|---|---|---|---|
| auth_session | Keeps the authenticated session and protects access to private areas. | Up to 30 days, renewed during use | Functional |
| start4me_theme | Remembers the light or dark theme preference. | 1 year | Functional |
| start4me_locale | Remembers the language selected on legal pages. | 1 year | Functional |
| google_oauth_state, google_code_verifier, google_timezone, google_instance_host | Secures and completes the temporary Google sign-in flow, including state, verifier, time zone and return instance. | 10 minutes | Functional |
| google_calendar_* | Secures and completes the optional Google Calendar connection, including state, verifier and return destination. | 10 minutes | Functional |
| start4me.dashboard.roleView | Remembers which authorized dashboard view is active, only in the current tab. | Until the tab is closed | Functional |
The asterisk groups temporary cookies sharing the same prefix. The start4me.dashboard.roleView item uses sessionStorage rather than a cookie and is included for transparency about a similar technology.
Third-party content and services
Some features contact external providers and may be subject to those providers' policies and identifiers:
- Google: optional sign-in and, for authorized users, voluntary connection to Google Calendar and Meet.
- Bunny: playback of embedded videos only on pages containing that type of content.
- Google Fonts: font loading when an institution selects an externally hosted font.
These services may receive technical data such as IP address, browser and requested page. Start4Me does not control cookies set directly by a third party's domain.
How to control cookies
The first-party cookies listed are functional: they support user-requested features, security or preferences. Blocking them may prevent sign-in, integrations, or saving the selected language and theme.
You can view, delete or block cookies in your browser settings. You can also remove permission for Google integrations in the platform and in your Google account.
If optional analytics, non-essential personalization or advertising cookies are added in the future, they must be explained and, where required, remain disabled until the user makes a valid choice.
Security measures
Authentication and OAuth cookies are sent with HttpOnly and SameSite=Lax protection and also use Secure in production. Temporary OAuth cookies expire automatically within ten minutes, and session identifiers are invalidated at sign-out.
Updates and contact
We will review this policy when the inventory or purposes change. The date at the top of the page identifies the current version.
For questions, use the channels provided by the institution that gave you access or the support option available in the platform.