Cookie Policy

    At Opportune.fyi, we are committed to protecting the privacy and security of our users. This Cookie Policy explains how we use cookies and other tracking technologies on our website.

    What are cookies?

    Cookies are small text files that are stored on your device when you visit a website. They are used to store information about your browsing behavior and preferences, and can be used to recognize you when you return to the website.

    What types of cookies do we use?

    We use only strictly essential cookies on our website. These cookies are necessary for the proper functioning of our website and are used to:

    • Authenticate and authorize your account: We use cookies to verify your identity and ensure that you are authorized to access certain parts of our website.
    • Remember your login information: We use cookies to remember your login credentials, so you don’t have to enter them every time you visit our website.
    • Provide basic website functionality: We use cookies to enable basic website functionality, such as remembering your language preferences and font sizes.

    Cookie Details

    Our auth system sets the following cookies:

    • Session cookie: This cookie contains an encrypted token that allows us to maintain your session. It is set as HttpOnly to prevent access through client-side scripts, enhancing security against cross-site scripting (XSS) attacks.
    • CSRF token cookie: This cookie contains an encrypted token that helps protect against Cross-Site Request Forgery (CSRF) attacks. It is set as HttpOnly to prevent access through client-side scripts, enhancing security. The CSRF token implements a double submit cookie technique, adding an extra layer of protection for our authentication system.
    • Callback URL cookie: This cookie is used temporarily during the authentication process, specifically for OAuth flows. It stores the URL to which you'll be redirected after successfully authenticating with an external provider. This cookie is essential for completing the sign-in process and is deleted once it's no longer needed. Like other cookies used by our auth system, it is set with security measures to protect your information.

    No Tracking or Third-Party Cookies

    We do not use any tracking cookies or third-party cookies. All cookies set on our site are first-party cookies used exclusively for the functioning of our authentication system. Our tracking system is competely anonymous and we do not track any personal information nor do we use PIIs to track you. We also do not sell any data to anyone at all.

    Cookie Lifespan

    The session cookie set by our auth system typically has a lifespan of 30 days by default. After this period, or when you log out, the cookie is automatically deleted.

    Cookie Security

    Our cookies are secured using the following measures:

    • HttpOnly flag: Prevents access to the cookie through client-side scripts
    • Secure flag: Ensures the cookie is only transmitted over HTTPS
    • SameSite attribute: Provides protection against cross-site request forgery (CSRF) attacks

    How long do cookies last?

    The essential cookies we use are session cookies, which means they are deleted when you close your browser. They do not persist on your device after you leave our website.

    How can you manage cookies?

    You can manage cookies by adjusting your browser settings. Most browsers allow you to:

    • Accept or decline cookies
    • Set cookie expiration dates
    • Delete cookies
    • Block third-party cookies

    You can also manage cookies by using browser extensions or plugins, such as uBlock Origin or Ghostery.

    What about third-party cookies?

    We do not use third-party cookies on our website. We do not allow any third-party scripts or tracking technologies to be loaded on our website, and we do not share any user data with third-party companies.

    Changes to this Cookie Policy

    We may update this Cookie Policy from time to time. If we make any changes, we will post the updated policy on our website and update the "Last Updated" date at the bottom of this page.

    Contact Us

    If you have any questions or concerns about our Cookie Policy, please contact us.

    By using our website, you consent to the use of essential cookies as described in this policy. If you do not consent to the use of essential cookies, please do not use our website.

    Last Updated: August 30, 2024