Cookies
Quorum sets only the cookies it needs to do what you asked: keep a language you chose, sign you in, and keep you signed in. There are no advertising, analytics or social-media cookies, and no other company sets cookies through this site. That is why there is no cookie banner.
Why there is no cookie banner
The law asks a website for your consent before it stores information on your device or reads it back, unless that is strictly necessary to provide a service you asked for (Art. 399 of the Polish Electronic Communications Law, Prawo komunikacji elektronicznej, which implements Art. 5(3) of the EU ePrivacy Directive). Every cookie below falls under that exception: each one exists only because you picked a language, are signing in or are signed in. Nothing is set to measure you, follow you across sites or show you advertising, so there is nothing to ask consent for.
If Quorum ever needs a cookie that is not strictly necessary, it will ask first, with a choice as easy to refuse as to accept, and this page will change before it does.
The cookies
All are first-party: set by quorumwork.com for quorumwork.com only. All except the two preferences, quorum.locale and sidebar_state, are HTTP-only (scripts on the page cannot read them), are sent over HTTPS only on the live site, and are marked SameSite, so another website cannot make your browser send them with a form it submits.
| Cookie | What it is for | How long | Set on |
|---|---|---|---|
quorum.locale | Remembers the language you chose in the language menu, so pages open in it. Set only when you pick a language. | 1 year | Any page, only after you choose a language |
cl_session | Keeps you signed in between visits for up to 14 days from sign-in, including in the operator console. Inactivity does not end the session. It holds an account identifier, never your email or password. Signing out or revoking account access ends it earlier. | Up to 14 days from sign-in | Only after you sign in |
cl_mfa | Holds the step between your password or link and your authenticator code, so the code is checked against the sign-in it belongs to. | 10 minutes | Only while you sign in or connect a service |
cl_mfa_enroll | Holds a new authenticator secret while you set it up, until you confirm the first code. | 15 minutes | Only after you sign in |
cl_mfa_codes | Shows your new recovery codes once, right after they are made. | 10 minutes | Only after you sign in |
cl_oauth | Proves that the Google, Microsoft or other service sending you back is answering a request this browser started, when you sign in with it or connect it. | 10 minutes | Only while you sign in or connect a service |
cl_oidc_verifier | Completes a sign-in through your company's single sign-on securely (the PKCE verifier). | 10 minutes | Only while you sign in or connect a service |
quorum_outlook_auth | Completes a sign-in from the Outlook add-in. | 10 minutes | Only while you sign in or connect a service |
quorum.policy-draft | Keeps what an administrator typed into Settings when a value was refused, so it is not lost. | 10 minutes | Only after you sign in |
quorum.scim-token | Shows a new directory-sync (SCIM) token to the administrator who created it, once. | 10 minutes | Only after you sign in |
quorum.mcp-token | Shows a new MCP access token to the person who created it, once. | 5 minutes | Only after you sign in |
sidebar_state | Remembers whether you collapsed the dashboard's side menu. | 7 days | Only after you sign in |
On the public pages
- A visit sets no cookie. Reading the website, following a referral link, or sending the contact, partner, referral or newsletter form sets none. The only cookie a visitor can get before signing in is
quorum.locale, and only by choosing a language in the language menu. - No browser storage. The public pages do not write to local storage, session storage or any other storage in your browser. If you chose a light or dark theme in the dashboard, the page reads that choice so it shows the same theme.
- Website analytics use no cookie. When enabled, the measurement described in the privacy notice uses a random number held in memory for one page load, stores nothing in your browser, and is skipped for signed-in visitors and for browsers that send Do Not Track or Global Privacy Control.
Browser storage in the dashboard
Once you are signed in, the dashboard keeps a few conveniences in your browser’s local storage. They never leave your browser and are not sent to Quorum.
| Key | What it is for |
|---|---|
theme | The light or dark theme you chose in the dashboard. Read on every page so the theme you chose applies there too. |
quorum.sidebar | No longer written. Read once before a page paints, for menus collapsed before the side menu moved to the sidebar_state cookie. |
quorum.tours | Whether you switched the dashboard's guided tours off. |
quorum.tour.* | Which dashboard tours you have finished, so they are not shown again. |
Removing them
You can delete cookies and site data in your browser’s settings at any time. Deleting cl_session signs you out; deleting quorum.locale returns the site to the language your browser asks for. Blocking all cookies for quorumwork.com leaves the public pages readable but makes signing in impossible.
Questions about cookies or anything else on this page: use the contact form. The privacy notice describes everything else Quorum processes.