Cookie policy
Last updated 12 September 2026
This site sets five cookies, and every one of them is there to make the site work. There is no analytics cookie, no advertising cookie, and no third-party tracker on the Kampala Parents Legacy Portal. Nobody is following you from here to anywhere else, and we are not building a profile of you.
We mention it because it is unusual, and because it means there is no consent banner to dismiss: none of these cookies needs your permission under the DPPA, and none of them would work if you refused.
The cookies we set
__Secure-authjs.session-token
Keeps you signed in to your alumni or admin account. Named authjs.session-token when not on HTTPS.
- Set by
- This site
- Lasts
- 30 days, or until you sign out
__Host-authjs.csrf-token
Stops another website from submitting the sign-in form on your behalf.
- Set by
- This site
- Lasts
- Until you close the browser
__Secure-authjs.callback-url
Remembers which page to return you to after you sign in.
- Set by
- This site
- Lasts
- Until you close the browser
kposa_cart
Identifies your shopping basket when you are not signed in, so it survives you closing the tab. Holds a random reference, nothing about you.
- Set by
- This site
- Lasts
- 60 days
kposa_discount_code
Remembers a discount code you entered so it still applies at checkout.
- Set by
- This site
- Lasts
- 60 days
| Cookie | Set by | What it does | How long |
|---|---|---|---|
| __Secure-authjs.session-token | This site | Keeps you signed in to your alumni or admin account. Named authjs.session-token when not on HTTPS. | 30 days, or until you sign out |
| __Host-authjs.csrf-token | This site | Stops another website from submitting the sign-in form on your behalf. | Until you close the browser |
| __Secure-authjs.callback-url | This site | Remembers which page to return you to after you sign in. | Until you close the browser |
| kposa_cart | This site | Identifies your shopping basket when you are not signed in, so it survives you closing the tab. Holds a random reference, nothing about you. | 60 days |
| kposa_discount_code | This site | Remembers a discount code you entered so it still applies at checkout. | 60 days |
The first three are set by Auth.js, the sign-in system this site uses, and only once you actually sign in. The two beginning kposa_ are set the first time you put something in your basket. All five are marked so your browser will not send them to another site, and all but kposa_discount_code are additionally hidden from JavaScript running on the page. kposa_discount_code holds only a discount code you typed in yourself, nothing about you.
One thing that is not a cookie
If you switch the site between light and dark, we save that choice under kposa-theme in your browser’s local storage. It is not a cookie and is never sent to our servers — it never leaves your device. We mention it because it is still us storing something on your machine, and you are entitled to know. Clearing your site data removes it.
What we do not do
We checked this rather than assuming it. At the time of writing, this site loads no Google Analytics, no tag manager, no advertising pixel, no social media tracker, and no third-party script that profiles visitors.
Our hosting provider may set operational cookies of its own for load balancing or security. Those do not identify you to us and we do not read them.
If that ever changes
If we add analytics or any other non-essential cookie, we will update this page before it is switched on, and ask for your consent first, as the DPPA requires. Consent means a real choice — nothing will be set while you decide.
Controlling cookies
Because all five are strictly necessary, there is nothing here to switch off. You can block or clear cookies in your browser settings, but blocking these means you will not be able to stay signed in and your basket will empty whenever you close the tab.
Contact
Questions about this policy: thekposa@gmail.com. See also our privacy policy and terms.