This Cookie Policy ("Policy") describes how EDUCERT (PTY) LTD ("EDUCERT", "we", "us", or "our") uses cookies and similar technologies in connection with:
- the EDUCERT website at educert.co.za (the "Website"); and
- the EDUCERT software platform and related services at app.educert.co.za (the "Platform"),
together, the "Services".
This Policy should be read with our Privacy Policy, Terms of Service, and Service Providers page.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website or use an online service. Similar technologies may include local storage or session identifiers with comparable purposes.
Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain until they expire or are deleted). They may be set by EDUCERT ("first-party") or by a service provider acting on our behalf.
2. How we use cookies
EDUCERT uses cookies for essential security, authentication, and functionality on the Platform, and for Website analytics and marketing measurement on educert.co.za where you have given consent.
We do not use invasive third-party advertising cookies on the Platform. On the marketing Website, Meta Pixel may set cookies and similar identifiers only after you choose Accept all in our cookie consent banner. If you choose Reject non-essential, Meta Pixel is not loaded.
You can reopen your choice at any time using Cookie preferences in the Website footer.
3. Certificate verification cookies (Platform)
Public certificate verification on the Platform is email-gated using a one-time passcode ("OTP") sent by email. Two first-party cookies support this flow. Both are classified as essential / security cookies because they are necessary to protect verification access and bind OTP validation to the correct browser session.
OTP verification must be completed in the same browser used to request the code. These cookies are not designed to support cross-device or cross-browser verification.
3.1 educert_verifier_otp
- Type: Essential / security (httpOnly)
- Purpose: Stores the server-side OTP challenge state so the code entered by the verifier can be validated against the browser that requested it.
- Duration: Up to 10 minutes, aligned with OTP expiry. The cookie is removed when the OTP challenge succeeds, expires, or is invalidated.
- Provider: EDUCERT (first-party)
3.2 educert_verifier_session
- Type: Essential / security (httpOnly)
- Purpose: Maintains an authenticated verifier session after successful OTP verification so the verifier can view verification results without re-entering an OTP for each page load during the session.
- Duration: Session ends after 15 minutes of inactivity (idle timeout). A renewal warning may be shown from 10 minutes of inactivity. The session ends in any event after an absolute maximum of 60 minutes.
- Provider: EDUCERT (first-party)
4. Platform authentication cookies
Registered Platform users authenticate through our authentication service provider, Clerk. Clerk may set essential cookies required for login, session management, and security on app.educert.co.za.
Cookie names and exact durations for Clerk-managed cookies may change as the provider updates its service. [TODO — legal review: publish a current list of Clerk cookie names and durations, or link to Clerk's cookie documentation.]
See our Service Providers page for more information about Clerk.
5. Website cookies
The marketing Website at educert.co.za uses analytics and marketing measurement technologies in addition to any essential technical processing required for Website delivery.
5.1 Meta Pixel (Website analytics and marketing)
We use Meta Pixel (provided by Meta Platforms Ireland Limited and its affiliates, including Meta Platforms, Inc.) on the marketing Website to measure page views, understand how visitors interact with the Website, and evaluate the effectiveness of our advertising on Facebook and Instagram.
Meta Pixel is loaded only if you accept non-essential cookies through our cookie consent banner. Your choice is stored in your browser using localStorage under the key educert_cookie_consent so we can remember your preference on future visits.
We currently use the following Meta Pixel identifiers on the marketing Website: 3983035091826932 and 997478059860010. Events such as page views and CTA interactions may be sent to both pixels after consent.
Meta Pixel works by loading a script from connect.facebook.net and may set or read cookies and similar identifiers on your device. Depending on your browser settings and whether you are logged in to Meta services, Meta may receive information such as:
- pages viewed and actions taken on the Website;
- browser type, device information, and screen resolution;
- IP address and approximate location derived from it;
- referral source and URL parameters; and
- date and time of the visit.
Common cookies associated with Meta Pixel may include:
_fbp— first-party cookie used to distinguish browsers and measure advertising effectiveness. Typical duration: up to 90 days._fbc— first-party cookie that may be set when you arrive from a Meta advertisement link. Typical duration: up to 90 days.- Meta third-party cookies — Meta may also set or read cookies on its own domains (for example
facebook.com) where permitted by your browser and account settings.
Cookie names, durations, and exact behaviour may change as Meta updates its services. For more information, see Meta's policies at facebook.com/privacy/policy and facebook.com/policies/cookies.
Meta Pixel is deployed on the marketing Website only. It is not used on app.educert.co.za for Platform login, certificate verification, or customer certificate record workflows.
See our Service Providers page and Privacy Policy for more information about how Website visit data is processed and shared with Meta.
5.2 Website delivery and infrastructure
Essential technical processing related to Website delivery (for example content delivery or security functions provided by our hosting infrastructure) may involve short-lived technical identifiers. [TODO — legal review: confirm whether Cloudflare Pages or related infrastructure sets cookies requiring disclosure on the Website.]
6. Managing cookies
When you first visit the marketing Website, a cookie consent banner lets you Accept all cookies (including Meta Pixel) or Reject non-essential cookies. You can change your choice later using Cookie preferences in the Website footer.
Most browsers also allow you to refuse, delete, or manage cookies through browser settings. Because verification and Platform login depend on essential cookies, disabling educert_verifier_otp, educert_verifier_session, or authentication cookies may prevent those features from working.
To limit Meta Pixel tracking on the Website, you may:
- adjust your browser cookie settings or use private browsing modes;
- use browser extensions or settings that block third-party cookies or tracking scripts;
- review Meta ad preference settings at facebook.com/settings?tab=ads; or
- visit youronlinechoices.eu or similar industry opt-out tools where available.
For more information about how we process personal information connected to cookies, including verifier email addresses, IP addresses, and audit logs, see our Privacy Policy.
7. Changes to this Policy
We may update this Policy from time to time to reflect changes in product functionality, cookie usage, or legal requirements. The "Last updated" date at the top of this page indicates when the Policy was last revised.
8. Contact us
For questions about this Cookie Policy:
- EDUCERT (PTY) LTD (Registration No. 2013/155188/07)
- Email: admin@educert.co.za
- Website: educert.co.za/contact.html