Legal
Cookie Policy
Last updated: June 30, 2026
Every cookie we set, what it stores, and how to control it.
About our cookies
This page lists every cookie StudentLife OS sets on your device, what each one stores, how long it lives, and why we need it. We do not use cookies for advertising, we do not sell your data, and we do not share these cookies with marketing networks.
1. Strictly necessary cookies
These are required for the Platform to work. They keep you signed in, carry multi-factor authentication between pages, and remember your cookie-consent choice. Without them you could not sign in or stay signed in.
| Name | Purpose | Lifetime | Set by |
|---|---|---|---|
| next-auth.session-token | Signed-in student session, issued on login. The __Secure- variant is used on HTTPS. | Up to 30 days | StudentLife OS |
| organization_admin_session | Signed envelope for an organization owner or team session, bound to your browser and rejected on mismatch. | Up to 30 days (10-day idle timeout) | StudentLife OS |
| school_admin_session / school_team_session | Signed envelope for a school owner or school team session. | Up to 30 days (10-day idle timeout) | StudentLife OS |
| department_session / department_team_session | Signed envelope for a department lead or department team session. | Up to 30 days (10-day idle timeout) | StudentLife OS |
| Staff console session | Set only for designated StudentLife OS staff accounts (platform and security operations), and never for student, school, or organization accounts. Bound to the browser, protected by multi-factor authentication, and short-lived. | Up to 12 hours (30-min idle timeout) | StudentLife OS |
| pending_login_session | Short-lived bridge during multi-factor authentication. Cleared the moment MFA succeeds or fails. | 15 minutes | StudentLife OS |
| sl_link_pin | Lets email-verify and password-reset links recognize the same browser that requested them, so the raw token is not shared over the URL. | 1 hour | StudentLife OS |
| slos_cc_v1 | Records your cookie-consent choice so the banner does not reappear on every page. | 6 months | StudentLife OS |
All session cookies are HTTP-only (not readable by JavaScript), bound to your IP and user agent at issue time, and signed so they cannot be forged.
For students, the signed-in session also reflects your verification status and sign-in count so the Platform can apply the verification grace window (the period during which a not-yet-verified student keeps full access before being asked to upload proof of enrollment). This is part of keeping you signed in and is not used for advertising or cross-site tracking. How verification works is described in our Privacy Policy and at studentlifeos.com/verification.
2. Analytics cookies (first-party only)
We do not use Google Analytics or any other third-party analytics provider. We set one small first-party cookie so we can give recruiters and schools an honest opportunity-view count.
| Name | Purpose | Lifetime | Set by |
|---|---|---|---|
| slo_anon_view | A small opaque identifier so an anonymous opportunity view is counted once per browser rather than per refresh. No IP, no personal data, no cross-site tracking, not shared. | 90 days | StudentLife OS |
You can disable this by choosing Only essential on the cookie banner, or by deleting slo_anon_view from your browser at any time.
3. Network-edge cookies (Cloudflare)
Our content-delivery and security provider, Cloudflare, sets a small number of cookies at the network edge to protect the Platform from automated abuse. We list them for transparency; we do not read them and do not use them for analytics. Cloudflare's full disclosure is at cloudflare.com/cookie-policy.
| Name | Purpose | Lifetime | Set by |
|---|---|---|---|
| __cf_bm | Cloudflare bot-management cookie that helps the edge tell real visitors from automated traffic. Set by Cloudflare. | 30 minutes | Cloudflare |
| cf_clearance | Cloudflare challenge-clearance cookie so you are not re-prompted on every request. Set by Cloudflare. | 30 days | Cloudflare |
4. Controlling cookies
You can clear or block cookies through your browser settings at any time. Clearing the strictly-necessary session cookies will sign you out. Clearing the consent cookie means the banner reappears on your next visit. You can also change your choice from the cookie banner at any time.
5. SLOS AI and your data
If you choose to use the optional SLOS AI assistant, the relevant parts of your profile and your resume text are sent to our AI provider to draft your application. This is not cookie-based tracking and never happens unless you start it. See the SLOS AI section of our Privacy Policy.
6. Changes
When we add or remove a cookie, we update this page and the Last updated date above. Material changes are also surfaced through the cookie banner on your next visit.
7. Contact
Questions about cookies? Contact us:
StudentLife Technologies LLC
1 Sansome St, Suite 1400, San Francisco, CA 94104
Email: support@studentlifeos.com
Phone: (415) 508-8610