Cookies
Cookie notice
ValoraHR uses a small number of cookies that are strictly necessary to sign you in and keep your session secure. It sets no analytics, advertising or tracking cookies, and loads no third-party scripts that would.
Last updated Tuesday 15 September 2026
The cookies ValoraHR sets
| Name | Purpose | Lifetime |
|---|---|---|
| valorahr_session | Keeps you signed in. Holds a random token; the database stores only a keyed hash of it. | Up to 14 days, ending sooner after 72 hours without use or when you sign out |
| valorahr_org | Remembers which organisation you last opened, if you belong to more than one. Ignored unless it names one of your own memberships. | Up to one year; removed when you sign out |
| valorahr_mfa | Carries a sign-in that is waiting for your two-factor code. | About 10 minutes |
| valorahr_mfa_setup | Holds the new, encrypted secret while you turn on two-factor authentication. Sent only to account pages. | 10 minutes, or until set-up finishes |
All of them are httpOnly (not readable by scripts in the page), sent only to ValoraHR, marked SameSite=Lax, and marked Secure over HTTPS.
Controlling cookies
You can delete or block cookies in your browser settings. If you block the cookies above, you will not be able to sign in to ValoraHR.
Questions about this notice: support@techvora.net. How personal data is handled more generally is described in the privacy notice.