Browser Storage & Cookie Transparency

Cookie Policy

Last Updated: January 1, 2026 | Effective Date: January 1, 2026

1. What Are Cookies?

Cookies are small text files placed on your browser or device when you visit websites. They enable the web server to recognize your device, maintain active sessions, remember your preferences, and verify assessment integrity.

2. Types of Cookies We Use

Thread Security Education uses cookies strictly categorized into the following purposes:

Essential & Security Cookies (Mandatory)

Always Active

These cookies are vital for logging into the Student Portal, authenticating API requests via HMAC-SHA256 signed session tokens (tse_session), preventing CSRF attacks, and securing assessment sessions.

Functional & Learning Analytics Cookies

Configurable

These cookies remember your course player theme, sandboxed terminal font size, audio preferences, and help us optimize page load speed and user journeys.

Marketing & Workshop Notice Cookies

Configurable

Used occasionally to present relevant cybersecurity webinars, scholarship alerts, and new batch launch schedules without displaying repetitive banners.

3. Technical Security of Our Cookies

In alignment with industry-leading cybersecurity engineering practices, all sensitive cookies issued by Thread Security Education include the following protection flags:

HttpOnly: Blocks malicious client-side JavaScript from accessing session data (mitigating XSS).
Secure: Guarantees cookies are transmitted exclusively over encrypted HTTPS/TLS connections.
SameSite=Lax/Strict: Protects against Cross-Site Request Forgery (CSRF) attempts.

4. Managing Your Preferences

You can modify or withdraw your cookie consent at any time by visiting our dedicated Cookie Settings page, or by configuring your browser settings to decline non-essential cookies.

5. Inquiries

For questions concerning our cookie usage or security headers, email tech@threadsecurity.in.