Cookie Notice
Updated 2026-09-09
This notice lists every cookie Shog Corporate Training sets, and what each one is for. It is short because the list is short. It is for anyone using the site, whether you are an administrator, a learner or a visitor to the public pages.
The short version
We set cookies to keep you signed in, to complete a sign-in with Google or Microsoft, and to remember the language you chose.
There is no advertising cookie. There is no third-party tracking cookie. Nobody is buying an audience from us, because we do not have one to sell.
The cookies we set
| Cookie | Who gets it | Purpose | Lifetime |
|---|---|---|---|
ts_session | Organisation administrators | Keeps you signed in to your workspace after you authenticate | A signed-in session. It expires on its own and ends when you sign out |
ts_portal_session | Learners | Keeps you in your training after you have opened your magic link and entered your one-time code | A short training session. It expires on its own |
ts_oauth | Anyone signing in with Google or Microsoft | Carries the state value that proves the response coming back from Google or Microsoft belongs to the sign-in you started, which is what stops a forged callback | Minutes. It is deleted as soon as the sign-in completes |
ts_storage_connect | An administrator connecting the organisation's SharePoint, OneDrive or Google Drive | The same protection for the storage connection handshake. It is scoped to the callback path and is not sent with ordinary requests | Minutes, and it is burned once the connection is made |
locale | Everyone | Remembers whether you chose Arabic or English, so you are not asked on every page | Up to a year, or until you change language |
ts_session, ts_portal_session, ts_oauth and ts_storage_connect are set with the HttpOnly flag, so page scripts cannot read them, and they are sent only over HTTPS in production. locale is readable by the page, because the language switcher has to read it.
Your theme preference
If you switch between light and dark appearance, that choice is remembered in your browser's local storage rather than in a cookie. It stays on your device, it is not sent to us with your requests, and clearing your site data clears it.
Analytics on the public pages
Page views on our public marketing pages are recorded first party, by us, on our own infrastructure. We use them to see which pages people read.
There is no third-party analytics script, no advertising pixel and no cross-site tracker on the site, and we do not use these events to profile you or to build an advertising audience.
Inside a workspace or a learner's training, activity is recorded in your organisation's own audit log, which belongs to your organisation and is included in its data export. That is a training record, not web analytics.
Cookies from other parties
Two moments involve someone else's site.
When you sign in with Google or Microsoft, you are on Google's or Microsoft's page for that step, and they set their own cookies under their own policies. The same applies when an administrator consents to connect SharePoint, OneDrive or Google Drive.
When you pay, the payment step runs through Stripe, which sets its own cookies for fraud prevention and to make the payment work.
We do not control those cookies. They are governed by those providers' own notices.
Consent
The cookies listed above are the ones the site needs in order to work: to keep you signed in, to complete a sign-in safely, and to serve you the language you asked for. They are not used for advertising or for tracking you across other websites.
Because there is no advertising or third-party tracking cookie to consent to, the site does not ask you to accept a tracking banner. If that ever changes, this notice will change first and consent will be asked for before any such cookie is set.
Turning them off
You can block or delete cookies in your browser settings.
Be aware of the effect. Without ts_session an administrator cannot stay signed in. Without ts_portal_session a learner will be asked to reopen their magic link. Without ts_oauth a Google or Microsoft sign-in cannot complete. Blocking locale only means the site will not remember your language between visits.
Questions
Write to training@shogconsulting.com.
Shog Corporate Training is operated by Shog Consulting (FZC), licence SC242038101, STRIP Block C VL07-017, Sharjah, United Arab Emirates.
This document is published in English. Published by Shog Consulting (FZC), licence SC242038101. Questions go to training@shogconsulting.com.