StudentOS AI

Cookie Policy

This page lists everything StudentOS AI stores in your browser. The list is short, because we do no analytics and no advertising.

Last updated 28 August 2026

Why there is no cookie banner

We set no non-essential cookies, so there is nothing to ask you to consent to.

Consent banners exist because most sites load analytics, advertising and cross-site tracking that legally require opt-in. StudentOS AI loads none of those. Everything below is either required to keep you signed in or a preference you set yourself, and both categories are exempt from consent requirements under the ePrivacy Directive and comparable US state laws.

Showing a banner anyway would be theatre: a consent dialog for something you cannot meaningfully decline without breaking sign-in. If we ever add analytics or any third-party tracker, we will publish a real preference control here and ask you before it loads — not after.

Cookies we set

These are strictly necessary: without them you cannot stay signed in.

Cookies set by StudentOS AI
What	Detail
Authentication session	Set by our authentication system when you sign in. Holds your encrypted session and refresh token so you stay signed in between page loads. First-party. Cleared when you sign out; otherwise expires on its own schedule.
Auth code verifier	A short-lived first-party cookie used during sign-in and password reset to complete the exchange securely. Removed once the flow finishes.

Browser storage we use

These are stored in your browser’s local storage, not sent to our servers with every request, and never used to identify or track you. Each exists so a preference survives a page reload.

Local storage keys
What	Detail
Theme preference	Remembers whether you chose light or dark, so the page does not flash the wrong theme while loading.
Sidebar state	Remembers whether you collapsed the navigation rail.
Study plan sync marker	A date stamp recording that today's study plan has already been saved, so it is not written twice.

You can clear all of these at any time through your browser’s “clear site data” controls. Doing so signs you out and resets those preferences to their defaults; nothing else is lost.

What we do not use

No Google Analytics or any other analytics package.
No advertising cookies, ad networks or retargeting pixels.
No Meta, TikTok, LinkedIn or other social-media tracking pixels.
No cross-site or cross-device tracking, and no data brokers.
No session-recording or heatmap tools.
No third-party fonts or scripts loaded from another domain.

Your controls

Most browsers let you block or delete cookies. Blocking the two cookies above will prevent you from signing in, since they are what keeps a session alive. Because we set nothing else, browser-level “Do Not Track” and Global Privacy Control signals have nothing to switch off here — we already behave as though they were on.

Changes

If we add anything that stores data in your browser, we will update this page and the “Last updated” date above, and we will ask for consent first where the law requires it. Questions: [TODO: [email protected]]. See also our Privacy Policy.