Moral Mirror

Cookies

This site sets only cookies that are strictly necessary to provide the service you have requested. Such cookies are exempt from the consent requirement under § 25(2) Nr. 2 TDDDG. We set no analytics, advertising or tracking cookies, so no consent banner is required.

Cookies this site sets

NamePurposeLifetimeWho it affects
moralmirror_pax Pseudonymous participant token: keeps your answers within one session together and lets you return to your reflection card (signed, HTTP-only). Holds no name or address. In the personal ethics case it holds your resume code instead, which brings you back to your case. You can clear it yourself with “I am done — forget this browser” on the card. When the activity runs inside a course page, your browser keeps a separate copy of it for that page, which only this site can read. 8 hours participants
moralmirror_admin Keeps educators and administrators signed in (signed, HTTP-only). 6 hours (educators) / 3 hours (administrators) backoffice
mm_pending_totp / moralmirror_pending2fa Carries the intermediate step of two-factor sign-in: the pending-login marker (5 minutes) and, while you are enrolling, the not-yet-confirmed TOTP secret (15 minutes). 5-15 minutes backoffice
passkey_challenge Set while you add a passkey, and while the educator sign-in page is open in a browser that can offer a passkey: a signed, HTTP-only one-time challenge for your device to sign. Deleted as soon as it has been used. 5 minutes backoffice
phronon-passkey-signin Not a cookie: kept in this browser's own storage (localStorage) after you sign in with a passkey, so the educator sign-in page shows the passkey first next time. Holds only the value 1, is never sent to us and contains no name or address. Removed when you clear this site's data in your browser. Until you clear this site's data in your browser backoffice

All cookies are set by this site itself (first-party). There are no third-party cookies.

You can block cookies in your browser settings; since the cookies listed here are required to run the service, the application will then no longer work correctly.