1. Which cookies we set
| Cookie | Purpose | Lifetime |
|---|---|---|
global-school-software-session |
Keeps you signed in and holds one-off messages such as “Marks saved”. Without it, every page would forget who you are. | 2 hours after your last request |
XSRF-TOKEN |
Proves that a form submission came from a page we served, blocking cross-site request forgery. | 2 hours |
remember_web_* |
Set only if you tick “Remember me” at sign-in. Deleted when you sign out. | Up to 5 years, or until sign-out |
All three are first-party, restricted to this domain, marked HttpOnly where they
carry a session, and sent with SameSite=Lax so they do not travel to other sites.
2. Why there is no consent banner
Consent is required for cookies that are not strictly necessary — analytics, advertising, cross-site tracking. We set none of those. Every cookie above exists to make signing in and submitting a form work at all, which is the exemption most cookie laws provide for. A banner asking permission for cookies you cannot decline without breaking the site would be theatre.
3. Local storage
A few screens remember small preferences in your browser's local storage — which tab you had open, whether a panel was collapsed. That information never leaves your device and is not sent to us. Clearing site data removes it.
4. Third parties
There are none. This site loads no third-party scripts, fonts, analytics or advertising, and its content-security policy blocks them at the browser level. Fonts and stylesheets are served from our own domain.
5. Controlling cookies
Every browser lets you view, block and delete cookies. Blocking ours will prevent you from signing in and from submitting any form, since the forgery check will fail. Public pages — the directory, school pages, the calendar — are fully readable with cookies blocked.
Questions about this document? Write to privacy@aiutil.in. Global School Software, Lucknow, Uttar Pradesh, India.