Last updated: 2026-10-23
This page describes the cookies set by Jump Auth and their purpose. We only use cookies that are strictly necessary to deliver the service. As a result, no consent banner is shown — strictly necessary cookies are exempt from the GDPR / ePrivacy consent requirement.
| Name | Purpose | Duration | Type |
|---|---|---|---|
ja_access | Session access token (RS256 JWT). HttpOnly, Secure, SameSite=Lax. | 30 minutes | Strictly necessary |
ja_refresh | Session refresh token. HttpOnly, Secure, SameSite=Lax. | 7 days | Strictly necessary |
ja_csrf | CSRF double-submit token. Readable by frontend JS, mirrored to X-CSRF-Token on state-changing requests. | 8 hours | Strictly necessary |
ja_email_2fa_pending | Temporary email verification challenge. HttpOnly, Secure, SameSite=Lax. | 10 minutes | Strictly necessary |
Jump Auth does not deploy analytics cookies, advertising cookies or third-party tracking pixels. If we add any in the future, we will publish a consent banner complying with Spanish AEPD guidelines and update this page with at least 30 days’ notice.
Because all our cookies are strictly necessary for authentication, disabling them will prevent you from using Jump Auth.