Updated 21 September 2026 · Current installation
1. Session cookie
The server issues an HttpOnly session cookie to authenticate requests. It uses SameSite=Lax and is marked Secure on HTTPS. It expires after seven days. Signing out invalidates the server session.
2. Browser storage
The app may store a display-only account cache, local study preferences, chat drafts, quiz or flashcard progress, and study streaks in your browser. Local data is specific to that browser and may remain after a tab closes. The server does not trust this cache for authorisation.
3. Third-party services
Payment checkout and provider websites may use their own cookies when opened. Their policies apply to those interactions. The application does not currently install an advertising tracker or an optional analytics SDK.
4. Your controls
You can remove cookies and site data in your browser settings. This signs you out and can remove local drafts and practice history. Download anything important first. Blocking session cookies prevents account features from working.
Questions? Contact the operator.