Cookies used by TourQuester
tq_session identifies your session and is HttpOnly. tq_csrf supports protection against forged requests. Both have a browser lifetime of up to seven days. Server-side guest sessions expire after one day; member sessions last up to seven days, with a 24-hour inactivity limit. Browser cookie expiry does not extend a server session.
tq_oauth_state links a sign-in attempt to your browser. Its sign-in transaction is valid for ten minutes and the cookie is cleared when the callback completes. Production cookies use secure transport protections. Local HTTP development uses separate cookies without the production HTTPS transport setting.
Sign-in and external services
Amazon Cognito may set its own cookies on its sign-in domain to maintain authentication. Signing out of TourQuester ends the app session but does not currently end Cognito's hosted sign-in session. On a shared device, close the browser session and clear the sign-in site's cookies if needed.
Google Fonts makes external font requests. The current TourQuester application does not use advertising or optional analytics cookies. This notice does not claim that external websites you visit have the same practices.
Your controls
You can clear or block cookies in your browser. Blocking essential cookies will prevent sessions, saved work and sign-in from functioning correctly. We do not show an optional-cookie consent banner for trackers that are not present. If optional tracking is introduced, the notice and required controls will be updated before it is used. Contact info@tourquester.com for cookie questions.