Cookie Policy

DriveU Booking Status · Effective 4 November 2026

1. What cookies are

Cookies are small files a website saves in your browser, so that it can recognise your browser on later requests.

2. Cookies we use

The Portal only uses cookies that are strictly necessary for sign-in and security. It does not use analytics, advertising or tracking cookies. On the live site, some of these names start with __Secure- or __Host-.

CookiePurposeHow long it lasts
booking-monitor.session-tokenKeeps you signed in after Google sign-in. Encrypted.Up to 12 hours
booking-monitor.otp-verifiedRecords that you entered your one-time code for this sign-in. Encrypted.Up to 12 hours
next-auth.csrf-tokenProtects sign-in and sign-out requests against forgery.Until you close your browser
next-auth.callback-urlRemembers which page to return to after sign-in.Until you close your browser
next-auth.stateProtects the Google sign-in step against tampering.15 minutes
next-auth.pkce.code_verifierProtects the Google sign-in step against interception.15 minutes

3. Other browser storage

When you sign in or out, a short message may be placed in your browser's local storage so your other open tabs stay in step. It is not used for tracking.

4. Third parties

Google sets its own cookies on its own sign-in pages, under Google's policies. The DriveU logo is loaded from ImageKit, and we do not set cookies for ImageKit.

5. Your choices

You can delete or block cookies in your browser settings. Because these cookies are needed for sign-in, you will not be able to use the Portal if you block them. Signing out ends your session.

6. More information

See the Privacy Policy for how personal data is handled. We may update this policy and will change the effective date above when we do.