ePrivacy & GDPR

Cookie Policy

Which cookies and browser storage Opportunities Gate uses, what each one is for, how long it lasts, and how you can remove it.

Effective:
To confirm: Effective date
Version:
1.0
Applies to:
Everyone who visits the site
Contact us
Advertising cookies
NoneNo ad networks, retargeting or data brokers
Analytics cookies
NoneWe would ask you first before adding any
Our cookies
Strictly necessarySign-in, security and your language
Set by
Us onlyNo third-party cookies on our pages

What cookies are and how we use them

A cookie is a small text file a website saves in your browser and reads back on your next request. Browsers also offer local storage and session storage, which keep data on your device without sending it to the server. This policy covers all three.

We only use them to make the site work: to keep you signed in, to protect your account and to remember your language and display choices. Under the ePrivacy rules and the GDPR, these strictly necessary uses do not need your consent, which is why the site shows no cookie banner.

No advertising

No ad networks, retargeting pixels or data brokers, and we never sell what our cookies hold.

No tracking

No analytics, social media pixels or cross-site trackers, and no fingerprinting of your browser.

Protected cookies

Sign-in cookies are encrypted, out of reach of page scripts (HttpOnly) and sent only over HTTPS.

Cookies we set

All strictly necessary

In production, cookie names can carry a __Secure- or __Host- prefix: the browser then only accepts them over HTTPS.

Sign-in and security

  • Cookie: authjs.session-token

    Purpose
    Keeps you signed in. Encrypted; holds your session, never your password.
    Lasts
    30 days, renewed while you use the site, deleted when you sign out
    Type
    Cookie (HttpOnly, Secure)
  • Cookie: authjs.csrf-token

    Purpose
    Protects the sign-in form against requests forged by other websites.
    Lasts
    Until you close the browser
    Type
    Cookie (HttpOnly, Secure)
  • Cookie: authjs.callback-url

    Purpose
    Remembers which page to return you to after you sign in.
    Lasts
    Until you close the browser
    Type
    Cookie (HttpOnly, Secure)
  • Cookie: authjs.state, authjs.pkce.code_verifier

    Purpose
    Secure the hand-off when you sign in with Google, LinkedIn or Microsoft.
    Lasts
    15 minutes
    Type
    Cookie (HttpOnly, Secure)
  • Cookie: device_id

    Purpose
    A random identifier for your browser, so Settings can show which device each of your sessions is on and you can sign one out.
    Lasts
    400 days
    Type
    Cookie (HttpOnly, Secure)

Preferences

  • Cookie: NEXT_LOCALE

    Purpose
    Remembers the language you chose: French, English or Arabic.
    Lasts
    1 year
    Type
    Cookie

Browser storage we use

Never sent to our servers

Local and session storage

  • Key: theme

    Purpose
    Remembers whether you chose the light or dark theme.
    Lasts
    Until you clear it
    Type
    Local storage
  • Key: og.checkout.returnTo

    Purpose
    The page to bring you back to after paying.
    Lasts
    Until you close the tab
    Type
    Session storage
  • Key: og.plan-alert.*

    Purpose
    Remembers that you dismissed a plan renewal reminder.
    Lasts
    Until you close the tab
    Type
    Session storage
  • Key: og-mailbox-draft:*

    Purpose
    Staff only: keeps an unsent email draft in the admin mailbox.
    Lasts
    Until the email is sent or discarded
    Type
    Local storage

Other websites we send you to

Our pages load no third-party scripts. The Contact page can show maps from OpenStreetMap in a frame, a blog post can play a YouTube or Vimeo video once you press play, and some steps take you to another company's own site; each applies its own cookie policy:

Maps

OpenStreetMap

The maps on the Contact page load from openstreetmap.org, which receives your IP address like any site you visit. We send it nothing else.

Videos

YouTube and Vimeo

A video in a blog post loads nothing until you press play. Then the player comes from youtube-nocookie.com or player.vimeo.com, in their privacy-enhanced modes, which may still set their own cookies.

Payment

Flouci and Stripe

Their checkout pages use cookies for payment security and fraud prevention.

Sign-in

Google, LinkedIn and Microsoft

If you sign in with one of these accounts, its sign-in page uses its own cookies.

Your choices

Because every cookie we set is strictly necessary, there is nothing optional to switch off today. Blocking our cookies in your browser stops sign-in from working and makes the site forget your language.

Before we add anything optional

If we ever add analytics or another optional cookie, we will update this page and ask for your consent first. Your cookie choices in Settings → Privacy & Data will apply, and we will honour Global Privacy Control signals as a refusal.

Deleting cookies in your browser

You can see and delete our cookies and stored data at any time. Deleting them signs you out and resets your language and theme. Menu names can vary with your browser version.

Google Chrome

  • Open Settings → Privacy and security → Third-party cookies → See all site data and permissions
  • Search for opportunitiesgate.net
  • Select Delete

Mozilla Firefox

  • Open Settings → Privacy & Security
  • Under Cookies and Site Data, select Manage Data
  • Search for opportunitiesgate.net, then Remove Selected

Safari

  • Open Settings → Privacy → Manage Website Data
  • Search for opportunitiesgate.net
  • Select Remove

Microsoft Edge

  • Open Settings → Cookies and site permissions → Manage and delete cookies and site data → See all cookies and site data
  • Search for opportunitiesgate.net
  • Select Delete

Changes to this policy

We update this page whenever we add, change or remove a cookie, and change its version and effective date. A new optional cookie always comes with a request for your consent.

Cookie questions

Ask us about a cookie you found, or how we use the data it holds.

admin@opportunitiesgate.net