JimJamJames Platform is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding your information.
This is an enterprise authentication platform designed for authorized personnel. We collect only the minimum data necessary to provide secure access to our services.
Account Information: Username, email address, encrypted password, role, and access permissions.
Authentication Data: Session tokens, authentication timestamps, IP addresses, and device information for security purposes.
Usage Data: Login attempts, access logs, and system interactions for security monitoring and audit compliance.
Our platform uses cookies to maintain your session and provide essential functionality. Below is a complete list of cookies we use:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| PHPSESSID | Maintains your logged-in session and tracks your authentication state | Until browser closes | Essential |
| auth_token | "Keep me signed in" functionality - allows you to stay logged in for extended periods | 30 days | Functional |
| cookie_notice_accepted | Remembers that you've acknowledged our cookie notice | 1 year | Essential |
| cf_clearance (if using Cloudflare) | Cloudflare Turnstile CAPTCHA verification to prevent automated abuse | 30 minutes | Essential |
Essential Cookies: These are necessary for the platform to function and cannot be disabled. They include session management and security features.
Functional Cookies: The "Keep me signed in" feature (auth_token) is optional and only set when you check the corresponding checkbox during login.
Authentication: To verify your identity and grant access to authorized resources.
Security: To detect and prevent unauthorized access, monitor suspicious activity, and maintain audit logs.
Communication: To send password reset emails and critical security notifications.
Service Improvement: To analyze system performance and improve platform functionality.
Active Accounts: Account data is retained while your account is active and authorized.
Session Data: Session cookies expire when you close your browser. Persistent authentication tokens expire after 30 days or when manually logged out.
Audit Logs: Security logs are retained according to our data retention policy and regulatory requirements.
Deleted Accounts: When an account is deactivated, associated data is retained for legal and security purposes according to applicable regulations.
We implement industry-standard security measures to protect your data:
• Passwords are hashed using bcrypt/Argon2 algorithms
• All connections use HTTPS/TLS encryption
• Authentication tokens are securely hashed (SHA-256)
• Cookies use HttpOnly, Secure, and SameSite flags
• Rate limiting to prevent brute-force attacks
• Regular security audits and monitoring
Depending on your location, you may have the following rights:
Access: Request a copy of your personal data
Correction: Request corrections to inaccurate data
Deletion: Request deletion of your account and data (subject to legal retention requirements)
Portability: Request your data in a machine-readable format
Objection: Object to certain processing activities
Cloudflare Turnstile: We use Cloudflare's CAPTCHA service to prevent automated abuse. Cloudflare may process certain data according to their privacy policy.
Email Service: Password reset and notification emails are sent through our email service provider. Email addresses are used solely for authentication purposes.
We do not share your data with third parties for marketing purposes or sell your information to anyone.
Browser Settings: You can configure your browser to refuse cookies, but this will prevent you from using the platform as authentication requires session cookies.
Persistent Login: To disable the 30-day "Keep me signed in" feature, simply uncheck the checkbox during login. You can also clear your auth_token cookie through your browser settings.
Logging Out: When you log out, your session is terminated and authentication tokens are invalidated.
We may update this privacy policy from time to time. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of the platform after changes constitutes acceptance of the updated policy.
If you have questions about this privacy policy or our data practices: