Cookie Disclosure

Last updated August 21, 2026

The short version

EZ Recert sets six cookies. All six are needed for the site to work: one keeps you signed in, four remember that you closed a banner, and one exists only while a support session is running. There are no advertising cookies, no cross-site trackers, and no analytics — not a reduced amount of analytics, none at all.

That is why you are not asked to accept anything. A consent banner is for cookies you could reasonably decline, and refusing a session cookie is the same as refusing to sign in. If that ever stops being true, this page changes first and you will be asked properly.

Cookies we set

Every one of these is first-party, is marked HttpOnly so no script on the page can read it, is marked Secure in production so it travels only over HTTPS, and is set SameSite=Lax so it is not sent along with requests started by another site.

Name	What it does	How long it lasts
`ezr-auth`	Keeps you signed in. It holds the two tokens your session is made of, and it is written when you sign in and cleared when you sign out.	30 days, matching the lifetime of the session itself
`ezrecert-void-dismissed` `ezrecert-remac-void-dismissed` `ezrecert-sent-back-dismissed` `ezrecert-remac-sent-back-dismissed`	Remember that you closed a notice on your dashboard — that a packet was voided, or that one was sent back to you. Four separate names because the four notices are dismissed independently. Each holds a short token identifying the notice it closed, and nothing about you.	A year, though the token stops matching as soon as you resubmit, which is usually much sooner
`ez-impersonation-stash`	Set only for the platform operator, and only while they are viewing the service as somebody for support. It holds the operator's own session, sealed, so they can be returned to it afterwards. It is deleted when the support session ends. If you are not the operator, this cookie is never set in your browser.	The support session, and no longer

Cookies set by somebody else

One third party can set storage in your browser through this site, and only in one circumstance.

Who	When it loads	What it is for
Cloudflare Turnstile	On the sign-in, sign-up, forgotten-password and reset-password pages, with the page. On the public marketing pages, not until you begin filling in the contact form — read the site and leave without touching it and nothing reaches Cloudflare at all.	Telling a person from a script, so those five forms are not usable by bulk automated submission. Cloudflare's widget runs in your browser and may use its own storage to do that. It is a privacy-preserving challenge rather than a tracker, but it is theirs rather than ours, and it is governed by their terms.

Nothing else third-party loads anywhere on this site. The one webfont the marketing footer uses is served from our own domain rather than fetched from Google, and the site is served directly rather than through a CDN that would set a cookie of its own.

Other things stored on your device

These are not cookies — they are never sent to us with a request, and we cannot read them. They are listed because they are still your storage and you may want to clear them.

What	Where	What it holds
Theme preference	`localStorage`, under `theme`	Whether you chose light, dark, or to follow your system.
Install prompt	`localStorage`, under `ezrecert:install-dismissed`	That you dismissed the card offering to install EZ Recert to your home screen, so it stops offering.
Service worker	Your browser's service worker storage	A small script that lets EZ Recert open offline and receive push notifications. It is registered for everyone; it delivers push only if you switch push notifications on yourself, per device.
Push subscription	Your browser, and a copy on our server	Created only when you turn push notifications on. It is an address your browser vendor issues for your device, which we use to send the notification. Turning push off in your profile deletes our copy.

What we do not do

No advertising cookies, and no ad networks anywhere on the site.
No analytics — no page-view counting, no session recording, no heatmaps, no performance beacons.
No cross-site tracking, no fingerprinting, and no data broker or ad exchange receives anything from this site.
No tracking pixels in our email, and no rewriting of the links in it. We record whether the provider accepted, deferred or failed a message, which is a fact about the transport rather than about you opening it.
Session replay is deliberately switched off in our error monitoring. It records the page, and pages here carry addresses and licence numbers.

Turning them off

Your browser can block or clear cookies for this site, and every browser offers it in settings. Two consequences worth knowing before you do:

Blocking ezr-auth means you cannot stay signed in. There is no fallback; the sign-in will appear to succeed and drop you back at the form.
Clearing the notice cookies brings those banners back. Nothing else changes, and no record of yours is affected.

Clearing site data also clears the theme preference and the install-prompt dismissal above, and unregisters the service worker, which switches push notifications off on that device until you turn them on again.

Changes to this page

This inventory is meant to be complete on the day it is dated. If a cookie is added — particularly one that is not strictly necessary — this page is updated before it ships, and anything requiring your consent will ask for it rather than appear here quietly.

The Privacy Policy covers everything else EZ Recert LLC holds about you, and the Terms of Service cover the rest of the relationship. Questions about any of it go to support@ezrecert.com.