LEGAL CENTRE · ALL PARTICIPANTS
Cookies & Device Storage Policy
Essential login and security storage, with optional trusted-device access explained separately.
Prepared 7 November 2026 · Version 2026-11-07.1-f5635801a776c1c9
Session cookie
The application uses a first-party PHP session cookie (normally PHPSESSID unless server settings rename it) for sign-in, email verification, security checks and form protection. It is configured as HttpOnly with SameSite=Strict and Secure on HTTPS. The normal session cookie lasts for the browser session; the server also checks inactivity after 30 minutes. Blocking it can prevent registration and sign-in.
Trusted PC option
If an eligible administrator explicitly enables trusted-PC sign-in, the __Host-infra_trusted_pc cookie can last up to 30 days. It is a sign-in credential, not an advertising identifier. Use it only on a private device. Sign out or use the trusted-device controls to revoke it. Browser cookie deletion alone does not replace revoking a lost or compromised device.
Browser and device storage
Installable application and service-worker features may cache application assets. Some operational workspaces may store limited device state needed for their enabled features. Device permissions for camera access are requested separately by the browser. Protect shared devices and remove local application data when you no longer need access.
Optional tracking
No analytics or advertising tracker is introduced by this Legal Centre or its footer. The current My Exhibition search workspace contains no optional analytics or advertising integration. A separately hosted organiser website may use different cookies and must explain and control its own integrations. Optional trackers must remain disabled until a suitable consent mechanism and updated notice are in place; a link to this policy alone is not permission to add them.
Your controls
Manage or delete cookies and site storage in your browser and use Account security or trusted-device controls where available. Essential login and security storage cannot be disabled within the application while keeping the affected features working. You can browse the policy pages without creating an account. There is no Accept all tracking button because this workspace does not currently offer optional tracking categories.