Yes, this script uses cookies to keep track of logged in users. It is pretty safe to assume that almost any script with a log-in function sets cookies. Otherwise you would have users to log in again every time, and most people don't like that, myself included. :-)
Would you mind posting a link to that policy maker you found? I would like to have a look and see if it will work for me too. Thank you!