Last updated 23 September 2026

Cookie policy

Papaya Learner Journey uses only the cookies needed to sign you in, remember your language, and keep the service secure. We do not use advertising cookies, and we do not use a third-party analytics cookie. This notice is the one linked from the banner. It is written for the Privacy and Electronic Communications Regulations (PECR) as they apply in the UK.

What a cookie is

A cookie is a small text file the browser stores for a site. We also use the browser’s local storage for a few preferences and for the offline queue. Local storage is not sent to us with every request the way a cookie is. Both are described here so the notice is complete.

Strictly necessary cookies do not need consent under PECR. The banner lets you dismiss the notice. Dismissing it does not switch on any further cookies. There is nothing else to opt into.

Cookies we set

Cookies set by Papaya Learner Journey
Name	Purpose	How long
authjs.session-tokenOn HTTPS the name is __Secure-authjs.session-token.	Keeps you signed in and carries your role so the service can show the right screens.	Up to 12 hours of inactivity. Renewed about once an hour while you are using the service.
authjs.csrf-tokenOn HTTPS the name is __Host-authjs.csrf-token.	Protects the sign-in form against cross-site request forgery.	A session cookie, cleared when the browser session ends.
authjs.callback-urlOn HTTPS the name is __Secure-authjs.callback-url.	Remembers which page to open after a successful sign-in.	A session cookie, cleared when the browser session ends.
NEXT_LOCALESet only when you choose a language.	Shows the product in the language you picked. The legal pages themselves stay in English.	One year.
activeOrgIdSet only for a platform administrator who switches organisation.	Remembers which customer organisation that administrator is working in.	30 days, or until they switch again.

Every cookie in that table is strictly necessary to provide the service you or your employer asked for.

Data stored on your device

Local storage used by Papaya Learner Journey
Key	Purpose	How long
papaya.cookie-notice.dismissed	Remembers that you dismissed the cookie notice, so it is not shown on every page.	Until you clear site data for this browser.
papaya.sidebar.collapsed	Remembers whether you collapsed the side navigation.	Until you clear site data for this browser.
lj_offline_queue_v1	Holds an assessment change that could not be sent because the device was offline, and sends it when the connection returns. It can contain a score you entered. It stays on the device.	Until the change is sent, or you clear site data.

The installed app may also cache pages in a service worker so a short loss of signal on the floor does not blank the screen. That cache stays on the device. It is not an advertising profile.

What we do not use

We do not set advertising cookies, social-media pixels, or third-party analytics cookies. If that changes, this page and the banner will change first, and any cookie that is not strictly necessary will wait for a proper choice. We will not bury that change in a policy update.

How to control cookies

You can dismiss the notice with the button on the banner. You can also block or delete cookies in the browser. If you block the session cookie, the service cannot keep you signed in. If you block the language cookie, the product stays in English unless you choose a language again during that visit.

Clearing site data removes the dismissal flag, the sidebar preference, and any assessment still waiting in the offline queue. Send pending assessments before you clear the browser, or they will not reach the record.

How personal data in those cookies is used is covered in the privacy policy. How long the underlying account and training records are kept is covered on the retention page.