Use of Cookies

What We Set

Criteria uses cookies strictly for authentication and security. No analytics, advertising, or tracking cookies are used.

We set four first-party cookies: three authentication tokens (access, identity, and session persistence) and one security token to protect against cross-site request forgery. All expire after 30 days. The authentication tokens are HTTP-only and cannot be read by scripts. All cookies are transmitted over HTTPS only.

Third-Party Cookies

None. Criteria does not use third-party analytics, advertising, or tracking services. Fonts are loaded from Google Fonts, which does not set cookies but does receive your IP address when loading typefaces.

Consent

Because all cookies are strictly necessary for authentication and security, consent is not required under UK GDPR and PECR. By using Criteria, you accept the use of these essential cookies.

Managing Cookies

You may block or delete cookies through your browser settings. Doing so will prevent you from using Criteria.