Cookie Policy

Last updated: July 2026

Qoralo uses only essential first-party authentication cookies. The access, refresh and admin-session cookies are HttpOnly, Secure and SameSite, so page JavaScript cannot read them. They are not advertising or cross-site tracking cookies.

Rate limiting is server-side and does not add a browser tracking cookie. Disabling essential cookies prevents authenticated features from working.