Cookie Policy
Last updated · 2026-05-16
This page explains the cookies and similar technologies that Alumnite uses on alumnite.com and the per-tenant subdomains. The mobile app does not use cookies — it stores authentication tokens directly in the device's secure storage.
1. What is a cookie
A cookie is a small text file stored by your browser when you visit a website. It lets the site remember information about your visit (e.g. that you are logged in) so subsequent requests don't have to re-collect it.
2. Cookies we use
All cookies below are first-party — set by alumnite.com itself, not by a third party.
Strictly necessary
- access_token — short-lived (~15 min) httpOnly cookie holding your signed session token. Required to call any authenticated API; you cannot sign in without it.
- refresh_token — longer-lived (~30 days) httpOnly cookie used to mint new access tokens silently. Rotated on every use.
- x-csrf-token — readable cookie used to verify form posts come from your browser session (defense against CSRF). Cleared on logout.
Preferences
- alumnite_locale — remembers your selected language (en / he). Set when you change locale, expires after a year.
- alumnite_theme_mode — remembers your selected light / dark mode preference, if you've overridden the system default.
What we don't use
We do not use third-party advertising cookies, cross-site tracking pixels, or analytics tags (Google Analytics, Facebook Pixel, etc.). The only third-party integrations that may set cookies on the page are the OAuth provider buttons (Google / Apple), and only during the seconds you are interacting with their sign-in flow — those cookies belong to Google / Apple under their own policies.
3. Controlling cookies
You can clear cookies from your browser settings. Clearing the access + refresh tokens signs you out of all open Alumnite tabs. Clearing preference cookies resets the language and theme to the defaults. We don't show a separate consent banner because the cookies we set are strictly necessary or are preferences you already opted into by changing the setting.
4. Changes
We will update this page when we add or remove a cookie. Material changes will be announced in-app.
5. Contact
Cookie questions can be sent to privacy@alumnite.com. See also our Privacy Policy and Terms of Service.