The short version
Every cookie Projoint sets today is strictly necessary to sign you in and keep your session secure. We don’t use advertising cookies or cross-site trackers, so there is nothing to opt in to and no cookie banner.
Cookies we set
These are set by the Projoint app (app.projoint.tech) and its API:
| Cookie | Purpose | Lifetime |
|---|---|---|
projoint_rt |
Keeps you signed in to the app. It is HttpOnly (scripts can’t read it), Secure, SameSite=Strict and only sent to our sign-in endpoints. |
Until your session expires or you sign out |
projoint_admin_rt |
The same, for the Projoint staff console. You only get it if you work at Projoint. | Until the session expires or you sign out |
projoint_gh_state |
Protects “Sign in with GitHub” against forged requests. | 10 minutes |
projoint_gh_stepup |
Carries an extra verification step (for example two-factor) during GitHub sign-in. | 5 minutes |
This website
This marketing site (projoint.tech) sets no cookies. If you dismiss the suggestion to read it in your language, we remember that in your browser’s local storage so we don’t ask again. If we turn on visitor statistics, we use a privacy-first, cookieless tool that counts page views in aggregate and does not identify you.
Browser local storage
The app also keeps a few preferences in your browser’s local storage — for example your light or dark theme, your language and layout choices such as collapsed groups. This data stays on your device.
Disabling cookies
Your browser lets you block cookies per site. If you block projoint_rt you won’t stay signed in to the app — that cookie is what keeps your session.
Changes
If we ever add a cookie that isn’t strictly necessary, we’ll update this page first and ask for your consent before setting it.
Contact
Privacy questions: privacy@projoint.tech.