§1The short version
No analytics. No advertising. No profiling. Nothing that follows you to another site. The cookies below exist so the application can tell who you are between one page and the next — take them away and you cannot log in.
Because we set only strictly necessary cookies, there is no consent banner on this site. Under California and other US state privacy laws, consent is not required for cookies that are essential to deliver a service you asked for — and we have no others to ask about. If that ever changes, this page changes with it, and you will be asked before anything non-essential is set.
§2Cookies we set
These are first-party cookies, set by trainedresponder.com. All are marked HttpOnly, which means page scripts cannot read them, and all are sent over HTTPS only.
| Name | What it does | Lifetime | Set when |
|---|---|---|---|
.AspNetCore.Identity.Application |
Keeps you signed in. It carries your authenticated identity and your role, and without it every page would ask you to log in again. | Until you sign out or close the browser. If you tick Remember me, up to 14 days. | You sign in. |
TrainedResponderUser |
Holds the key to your server-side session — the working state a page needs between requests. | 60 minutes of inactivity, or when the browser closes. | You sign in. |
.AspNetCore.Antiforgery.* |
Protects every form against cross-site request forgery: it proves a submission came from a page we served, not from another site acting as you. | Until the browser closes. | Any page with a form, signed in or not. |
TR_KioskOrgId |
Remembers which organization a shared check-in device belongs to, so the access code only has to be entered once on that device. It contains an organization number and nothing about a person. | One year, or until the device is locked. | A device is bound to an organization at an event kiosk. |
Blocking these in your browser will break sign-in, form submission, or both. There is no version of the application that works without them.
§3Browser storage
A few administrative screens remember a small interface preference in your browser's
sessionStorage — which tab of the lesson editor you had open, how many rows you
chose to see in a roster. It never leaves your browser, it holds no personal information,
and it is discarded when you close the tab. We use no localStorage and no
device fingerprinting.
§4Third parties a page may contact
Some pages load a component from another company. When that happens, your browser makes a request to that company and it sees your IP address and browser details — that is how the web works, and it is true of any embedded resource. Below is every one of them, and what it is doing there.
| Service | Where it appears | What it does, and whether it sets cookies |
|---|---|---|
| Cloudflare Turnstile | The public organization signup form. | Checks that a human is filling in the form, without the puzzles a CAPTCHA makes you solve. Cloudflare may set a cookie to remember that a check already passed. It is not used to track you across sites. |
| Cloudflare Stream | Lesson pages that have a video. | Plays the video inside a frame served by Cloudflare, which sets its own cookies on that frame for playback and delivery. Playback links are signed and expire. |
| Stripe | Checkout and the billing portal. | Payment is handled on Stripe's own pages, which you are redirected to. Stripe sets its cookies there, under its own policy. No Stripe code runs on our pages, and card details never reach us. |
| Google Fonts | Every page. | Serves the two typefaces the site is set in. No cookies. |
| Content delivery networks | Every page. | Serve stylesheets, icons, and script libraries — jsDelivr, cdnjs, the jQuery and DataTables CDNs, and Microsoft's. No cookies. |
| LocationIQ | Event and unit address fields, for administrators. | Suggests addresses as text is typed. Only the typed text is sent. No cookies. |
That is the complete list. There is no Google Analytics, no advertising tag, no social media pixel, no session recorder, and no heatmap tool anywhere on this site or in the application.
§5Your controls
Every browser lets you view, block, and delete cookies, usually under Privacy or Site Settings, and clearing them signs you out of TrainedResponder. Blocking cookies for this site specifically will stop you signing in at all.
We honor Global Privacy Control as a standing instruction, though we sell and share nothing for it to switch off. See §10 of the Privacy Policy.
Questions about this notice
InformaDev LLC d/b/a TrainedResponder — [email protected]