Cookie Notice

PART C - COOKIE NOTICE

1. Scope

This Cookie Notice explains how TestServes uses cookies and similar browser or device storage on testserves.com and school portals.

2. What these technologies do

A cookie is a small data item stored by a browser. Similar technologies include local storage, session storage and device identifiers. They may remember a session, secure a request, retain a preference or measure service performance.

3. Current categories

Strictly necessary: login, session continuity, CSRF protection, security and school routing. These are required to provide the requested service and cannot be disabled through a TestServes preference tool.

Preferences: remember permitted display or functional choices. Consent must be obtained where the storage is not strictly necessary.

Analytics: understand usage and improve performance. Analytics must remain disabled until any required consent is obtained.

Advertising or cross-site profiling: not currently intended and must remain disabled unless separately assessed and validly consented.

4. Current cookie and storage inventory

TestServes currently uses the following essential cookies and browser storage on public pages and school portals:

• Configured Laravel session cookie, for example the value of SESSION_COOKIE or the app-name session cookie: set by TestServes to keep a signed-in user session active, route the user through the correct portal and support examination continuity. It normally lasts for the configured session lifetime or until the browser/session is cleared.
• XSRF-TOKEN: set by TestServes to protect forms and authenticated requests against cross-site request forgery. It normally follows the session lifetime.
• testserves_cookie_acknowledged: set by TestServes when a visitor closes the cookie notice so the notice does not keep appearing. It lasts for up to 12 months.
• Local or session storage used by the active app page: used only where needed for interface state, editor drafts, security flow, examination continuity or user preferences on the device.

TestServes does not currently intend to use advertising cookies or cross-site profiling cookies. If analytics, advertising or other non-essential technologies are added later, this inventory will be updated and any consent required by law will be requested before those technologies are activated.

5. Choices

Because TestServes currently uses only essential cookies and essential browser storage, the public cookie notice allows users to acknowledge the notice without suggesting those essential technologies are optional. If any non-essential technology is introduced later, the interface will provide clear Accept and Decline choices before activation, avoid preselected consent and make later withdrawal as easy as acceptance.

Blocking essential cookies through browser settings may prevent login, examinations or other requested functions. Browser controls may be used to delete stored cookies, but deleting a live session cookie may sign the user out.

6. Changes and contact

The inventory will be updated when technologies or providers change. Questions may be sent to testserves.ng@gmail.com.