Cookie Policy
This policy explains cookies and similar browser storage used by ORYAIN, including the public website, sign-in page and application. It complements our Privacy Policy.
1. Cookies and similar storage
A cookie is a small value a website asks your browser to store and return with requests. Local storage stays on your browser until cleared; session storage normally lasts for that tab. Our controls cover these technologies, not just cookies.
2. Necessary storage
Necessary storage supports the service you request and cannot be switched off with our preference controls. You can block it in your browser, but sign-in may stop working.
| Name / type | Purpose | Lifetime / location |
|---|---|---|
oryain.workflow.sidHTTP cookie | Identifies your server session, including sign-in state. The cookie contains a signed session identifier; account and authorization state stays on the server. | Configured eight-hour cookie lifetime; renewal during use can extend it. Host-only on the application address. HttpOnly, SameSite=Lax and Secure on HTTPS production. |
site_privacy_workspace_v1First-party cookie | Shares your preference choice between our application, testing, administration and sign-in addresses. Contains only a category choice, version and timestamps; no account identifier, authentication token, student content or analytics permission. | 180 days on the workspace domain, Path=/, Secure and SameSite=Lax. Local development uses a host-only cookie across ports. Authentication sessions remain host-only. |
site.privacy.v1Local storage | Remembers your choice, policy version, choice time and expiration. It is not an advertising identifier and contains no student or email content. | Choice valid for 180 days in each browser. The public website and custom addresses keep separate choices. Replaced on change; an expired entry is ignored until your next choice. |
The public entry page does not need a sign-in cookie. OAuth sign-in is initiated on the application address so the authentication cookie does not span all subdomains.
3. Optional preferences
Optional storage is off until you select Allow preferences or enable Preferences in Manage cookies. The current interface still works without persistent preferences; settings and shortcuts may remain in memory while the page is open.
| Name / type | Purpose | Lifetime |
|---|---|---|
oryain.theme, oryain.workspace.collapsedLocal storage | Appearance and sidebar layout. | Until cleared, preference permission is withdrawn, or an expired choice is detected. |
oryain.viewPrefs.v1.*, oryain.bookmarks.v1.*Local storage | Personal view settings, starred/hidden references, bookmark addresses and labels. These may identify a saved record or view; they are not copies of the record body. | Same as above. Scoped to the selected account context on this device. |
oryain-ui-modeSession storage | Basic/advanced interface choice. | Normally the tab lifetime; also removed when preference permission is withdrawn or expires. |
Rejecting optional storage removes these saved browser preferences and shortcuts, without deleting company, school or student records or changing their deadlines. On a shared computer, review saved views and sign out when finished.
4. Analytics, advertising and third parties
Advertising pixels are not enabled. Google Analytics is available only on public website pages and only after a separate choice in Manage cookies. Sign-in and authenticated workspaces do not include analytics tracking. Operational server logs and service-usage measurements are separate from browser tracking; cookie choices do not turn off security, authorization, record history or service operations.
Google and Microsoft process information and may use their own cookies when you open their sign-in services. Those provider pages are governed by their policies: Google Privacy Policy and Microsoft Privacy Statement. Our controls cannot remove cookies on their domains. Following an external link may take you to a website with different storage practices.
We do not use advertising or sale/sharing tracking on these pages. A Global Privacy Control signal does not turn on any tracking and does not prevent necessary sign-in or a preference you explicitly request.
Optional public-site analytics
Enable Public-site analytics in Manage cookies to allow Google Analytics to measure visits to the public pages listed in our sitemap. It receives browser and network information, including an IP address during transmission, and the public page address and title. We omit query strings, fragments, referrer URLs, names, emails, user IDs, form values and workspace records. Analytics is never added to sign-in or authenticated workspaces. Enhanced measurement, Google Signals and advertising features are disabled.
The _ga and property-specific _ga_* cookies distinguish visits and sessions. Their configured lifetime is 180 days. Google processes measurements under its own terms; user-level event retention is configured in Analytics. Turning analytics off disables further measurement and removes these cookies from this public website. It does not erase measurements previously received by Google. Global Privacy Control keeps analytics off. How Google uses information from sites that use its services.
5. Changing your choice
Use Manage cookies in the footer of any page to review or change your settings. Application, testing, administration and sign-in share the preference choice in the same browser. Changing it takes effect when another workspace is opened or brought back into focus. Saved views and other preference values stay on their own website address; they are not copied between workspaces. Public-site analytics consent stays separate. Reject optional and Allow preferences are available when no valid choice is stored. Closing settings does not grant permission. Optional storage remains off if you have not made a choice.
Choices are stored locally, not in an account-wide consent database, and do not automatically follow you to another browser, device or custom domain. If cookies and browser storage are both blocked, your choice lasts only while the page is open. Clearing browser data removes the choice and prompts again. Withdrawal applies to future optional storage and removes the optional keys listed above; it is not a request to erase server records.
6. Updates and questions
We will update this policy and controls when storage purposes change. Additional nonessential tracking must remain blocked until the required choice and deployment review are in place. Questions about cookies or privacy can be sent to legal@oryain.com.