Cookie Policy
Effective 3 November 2026Version 1.0
This policy explains the cookies and similar browser storage TalentOS uses. We checked the application code: TalentOS uses only strictly necessary cookies and storage. It sets no advertising cookies and loads no third-party analytics or tracking scripts, so there is nothing to opt in to; our cookie notice simply tells you what we use.
This document is available in English, Kiswahili, French and Arabic. If the versions differ, the English version prevails.
1.Cookies we set
| Cookie | What it does | Type | How long it lasts |
|---|---|---|---|
| tos_at (access cookie) | Keeps you signed in with a short-lived access token. | Strictly necessary; not readable by scripts (httpOnly) | A quarter of an hour |
| tos_rt (refresh cookie) | Renews your sign-in without asking for your password again. Sent only to the sign-in service. | Strictly necessary; not readable by scripts (httpOnly) | 30 days if you choose to stay signed in, otherwise until you close the browser |
| tos_csrf (security cookie) | Protects your actions against forged requests from other websites. | Strictly necessary | As long as your sign-in |
| tos_portal (portal cookie) | Opens the right portal for your role (learner, institution, employer, mentor or El Roi). | Strictly necessary | As long as your sign-in |
| tos_role (demo cookie) | Does the same as the portal cookie in the demonstration version, which runs without a server. | Strictly necessary | 14 days if you stay signed in, otherwise until you close the browser |
- Cookie
- tos_at (access cookie)
- What it does
- Keeps you signed in with a short-lived access token.
- Type
- Strictly necessary; not readable by scripts (httpOnly)
- How long it lasts
- A quarter of an hour
- Cookie
- tos_rt (refresh cookie)
- What it does
- Renews your sign-in without asking for your password again. Sent only to the sign-in service.
- Type
- Strictly necessary; not readable by scripts (httpOnly)
- How long it lasts
- 30 days if you choose to stay signed in, otherwise until you close the browser
- Cookie
- tos_csrf (security cookie)
- What it does
- Protects your actions against forged requests from other websites.
- Type
- Strictly necessary
- How long it lasts
- As long as your sign-in
- Cookie
- tos_portal (portal cookie)
- What it does
- Opens the right portal for your role (learner, institution, employer, mentor or El Roi).
- Type
- Strictly necessary
- How long it lasts
- As long as your sign-in
- Cookie
- tos_role (demo cookie)
- What it does
- Does the same as the portal cookie in the demonstration version, which runs without a server.
- Type
- Strictly necessary
- How long it lasts
- 14 days if you stay signed in, otherwise until you close the browser
2.Browser storage
TalentOS also keeps a few items in your browser's local and session storage. They stay on your device:
- your language, theme (light or dark) and display preferences;
- whether you chose to stay signed in;
- that you have seen the cookie notice;
- in the demonstration version, the sample data you create, so the demo works without a server;
- a short history of the pages you opened, for the Back button, and the time of your last activity, to keep your session alive.
3.Third parties
We do not use advertising, social media or analytics cookies. When you start a video avatar session, the avatar appears in an embedded frame from our provider, Beyond Presence, which may use its own technically necessary storage for the live session.
4.Your choices
These cookies are needed for TalentOS to work, so they cannot be switched off inside the app. You can block or delete cookies in your browser settings, but you will then be signed out and may not be able to sign in. Clearing browser storage resets your language and theme.
5.Changes
If we ever add cookies that are not strictly necessary, such as analytics, we will update this policy and ask for your consent before setting them.
Questions about this document? Write to El Roi's Data Protection Officer at amitwashington7@gmail.com.