Cookies
Four, all set by MONUNI itself, all necessary to sign you in and keep the session safe. There is no analytics cookie, no advertising cookie and no third-party cookie — so there is nothing here to opt out of, and no banner asking you to.
Effective from 2 September 2026. Earlier versions are available on request.
| Cookie | What it does | Lasts | Readable by scripts |
|---|---|---|---|
monuni_at | Carries your signed-in session. Without it every page would ask you to sign in again. Short-lived on purpose — a stolen one expires quickly. | 15 minutes | No |
monuni_rt | Renews the session above so you are not signed out while you are using the product. Sent only to the sign-in endpoints, never to ordinary page or API requests. | 30 days | No |
monuni_csrf | Proves a request came from a MONUNI page and not from another site acting as you. The one cookie the page can read — the protection works by reading it and echoing it back. | 30 days | Yes |
monuni_tenant | Remembers which workspace you were last looking at. A convenience. Your actual access is decided on the server, never by this value. | 30 days | No |
Blocking them
Your browser can refuse them. MONUNI’s public pages will still work; signing in will not, because the session has nowhere to live. There is no version of the product that works without the first two.
What is not here
No Google Analytics, no tag manager, no Meta or advertising pixel, no session recorder, no A/B testing tool, no chat widget. Not as a policy that could quietly change — none of them is loaded by the site at all, which you can confirm from your own browser’s network tab.
More detail on everything else we store is in the privacy notice.