Cookies and browser storage

Last updated 30 September 2026

A cookie is a small file a website asks your browser to keep and send back. Browser storage is kept by your browser and never sent anywhere. Deenia uses both only to sign you in, keep your account and your school's records safe, and remember choices you make on the sign-in screen.

No tracking

No advertising, analytics or tracking cookies, and none from other companies.

First party only

Every item is set by Deenia for this site, never shared with anyone.

Short-lived

Sign-in cookies last minutes to 30 days; nothing follows you elsewhere.

Strictly necessary

Needed to sign you in, keep your account and your school's records safe, and remember choices you make on the sign-in screen. Deenia cannot work without them, so they cannot be switched off. Privacy law allows these without asking, because they are needed for the service you asked for (EU ePrivacy Directive Art. 5(3), UK PECR regulation 6).

Cookies

Name	What it does	How long
`deenia_session`The whole site	Keeps you signed in. It holds a sealed reference to your sign-in, checked by the server on every request.Set: When you sign in. HttpOnly, Secure, SameSite=Lax	Until the browser closes, or up to 30 days with "Keep me signed in"
`deenia_csrf`The whole site	Stops another website from making changes in your name. Deenia's own pages send it back with every change.Set: When you sign in or open a page. Secure, SameSite=Lax (readable by Deenia's pages on purpose)	30 days, renewed on each visit
`deenia_pending_sign_in`The sign-in address only	Holds a sign-in while you enter your two-step code.Set: When a sign-in needs a two-step code. HttpOnly, Secure, SameSite=Lax	5 minutes
`deenia_oauth_bind`The Google, Microsoft and Apple sign-in addresses only	Ties a Google, Microsoft or Apple sign-in to this browser, so nobody else can finish it.Set: When you choose Google, Microsoft or Apple sign-in. HttpOnly, Secure, SameSite=None (Apple answers from its own site)	10 minutes
`__Host-deenia_app_handoff`The whole site (the __Host- prefix stops any other site from setting it)	Ties a sign-in for the Deenia app, made in this browser, to the app that asked for it.Set: Only when an older Deenia app sends you here to sign in. HttpOnly, Secure, SameSite=Lax	15 minutes

deenia_session
Keeps you signed in. It holds a sealed reference to your sign-in, checked by the server on every request.
How long
Until the browser closes, or up to 30 days with "Keep me signed in"
Set
When you sign in
Sent to
The whole site
Flags
HttpOnly, Secure, SameSite=Lax
deenia_csrf
Stops another website from making changes in your name. Deenia's own pages send it back with every change.
How long
30 days, renewed on each visit
Set
When you sign in or open a page
Sent to
The whole site
Flags
Secure, SameSite=Lax (readable by Deenia's pages on purpose)
deenia_pending_sign_in
Holds a sign-in while you enter your two-step code.
How long
5 minutes
Set
When a sign-in needs a two-step code
Sent to
The sign-in address only
Flags
HttpOnly, Secure, SameSite=Lax
deenia_oauth_bind
Ties a Google, Microsoft or Apple sign-in to this browser, so nobody else can finish it.
How long
10 minutes
Set
When you choose Google, Microsoft or Apple sign-in
Sent to
The Google, Microsoft and Apple sign-in addresses only
Flags
HttpOnly, Secure, SameSite=None (Apple answers from its own site)
__Host-deenia_app_handoff
Ties a sign-in for the Deenia app, made in this browser, to the app that asked for it.
How long
15 minutes
Set
Only when an older Deenia app sends you here to sign in
Sent to
The whole site (the __Host- prefix stops any other site from setting it)
Flags
HttpOnly, Secure, SameSite=Lax

Browser storage

Name	What it does	How long
`deenia:keep-signed-in`This browser only; never sent anywhere	Remembers whether you ticked "Keep me signed in", so the box is set the same way next time.Set: When you sign in	Until you clear this site's data
`deenia:last-activity`This browser only; never sent anywhere	When you last used Deenia in any tab, so every open tab locks or signs out at the same time when Deenia is left alone.Set: While you are signed in	Until you clear this site's data
`deenia:passkey-declined`This browser only; never sent anywhere	Remembers that you said "Not now" to setting up a passkey, so you are not asked again for a while.Set: When you choose "Not now"	Until you clear this site's data
`deenia:offer-passkey`This tab only; never sent anywhere	Offers a passkey once, straight after a password sign-in.Set: After a password sign-in	Until the tab closes
`deenia:reminder-motion`This browser only; never sent anywhere	Remembers that you chose "Stop the movement" on the roll call reminder, so it stays still.Set: When you choose "Stop the movement" or "Let it move"	Until you clear this site's data
`deenia:cookie-notice`This browser only; never sent anywhere	Remembers that you have seen this cookie notice, and which version.Set: When you close the cookie notice	Until you clear this site's data

deenia:keep-signed-in
Remembers whether you ticked "Keep me signed in", so the box is set the same way next time.
How long
Until you clear this site's data
Set
When you sign in
Sent to
This browser only; never sent anywhere
deenia:last-activity
When you last used Deenia in any tab, so every open tab locks or signs out at the same time when Deenia is left alone.
How long
Until you clear this site's data
Set
While you are signed in
Sent to
This browser only; never sent anywhere
deenia:passkey-declined
Remembers that you said "Not now" to setting up a passkey, so you are not asked again for a while.
How long
Until you clear this site's data
Set
When you choose "Not now"
Sent to
This browser only; never sent anywhere
deenia:offer-passkey
Offers a passkey once, straight after a password sign-in.
How long
Until the tab closes
Set
After a password sign-in
Sent to
This tab only; never sent anywhere
deenia:reminder-motion
Remembers that you chose "Stop the movement" on the roll call reminder, so it stays still.
How long
Until you clear this site's data
Set
When you choose "Stop the movement" or "Let it move"
Sent to
This browser only; never sent anywhere
deenia:cookie-notice
Remembers that you have seen this cookie notice, and which version.
How long
Until you clear this site's data
Set
When you close the cookie notice
Sent to
This browser only; never sent anywhere

Your choices

There are no optional cookies to switch on or off. shows what is in use. To remove everything, clear this site's data in your browser's settings: you will be signed out, and the sign-in screen will ask again what it remembered.

The Deenia apps for iPhone, iPad and Android use no cookies. They keep only your sign-in in the phone's secure storage, as the privacy page describes.