Legal
Cookies
Talento sets three cookies, all of them strictly necessary to keep you signed in. There are no analytics or advertising cookies, which is why you are not asked to consent to any.
Last updated 8 September 2026
What is set
| Cookie | Purpose | Lifetime |
|---|---|---|
| talento_access | The short-lived token that proves you are signed in. | Under 2 hours |
| talento_refresh | Lets the short-lived token be renewed so you are not signed out mid-task. | 30 days from your last visit |
| talento_identity | Your email, display name and role, so the page can be drawn for the right person without a round trip. | 30 days |
How they are protected
All three are httpOnly, so no JavaScript on the page can read them — including any script that managed to get itself injected. All three are SameSite=Lax, which stops them being sent along with requests started by another site. Over HTTPS they are also marked Secure.
Why there is no cookie banner
Consent is required for cookies that are not strictly necessary — analytics, advertising, personalisation. Talento sets none of those. It runs no analytics, embeds no third-party scripts, and loads no external resources at page load: even the fonts are served from this domain rather than fetched from Google.
A banner asking permission for cookies that are exempt from consent would be theatre, and it would train you to dismiss a control that should mean something.
Refusing them
You can block cookies in your browser, and Talento will keep working right up to the point where you sign in — the session is the cookie, so without it there is no way to stay signed in. Clearing them signs you out.
Questions go to [PRIVACY CONTACT — email address].