Project access and administration

Project administration uses technical cookies: pws_projects_session (up to 8 hours) and pws_projects_challenge (up to 5 minutes during two-factor authentication). They are set when signing in to project administration, not when browsing project cards.

For project access without a linked application, entered usernames and passwords are neither transmitted nor stored. To limit repeated attempts, the server records a derived hash of the network address and an attempt counter. Five attempts trigger a 15-minute restriction. Expired entries are cleaned up during subsequent attempts.

Separate applications opened from a project card may have their own sign-in process and privacy information.