What we set
| Name | Technology | Category | Purpose | Lifetime |
|---|---|---|---|---|
| Authentication session | Browser local storage (key set by the authentication library, e.g. sb-…-auth-token) | Strictly necessary | Keeps you signed in between page loads and lets the app attach your session to server requests. | Until you sign out, the session expires, or you clear site data. |
| Sidebar state | First-party cookie (sidebar_state) | Preference | Remembers whether the in-app sidebar is expanded or collapsed. | About 7 days. |
| Narration speed | Browser local storage (coursepilot.narration.rate) | Preference | Remembers the read-aloud speed you chose for in-class narration. | Until you clear site data. |
| Narration voice | Browser local storage (coursepilot.narration.voice) | Preference | Remembers the read-aloud voice you chose for in-class narration. | Until you clear site data. |
| Cross-site request protection | Request-level token used by our server-function middleware | Strictly necessary | Prevents another site from invoking your session's server functions. | Per session. |
Strictly necessary
The authentication session and the cross-site request protection are required for the service to function. They cannot be switched off while you are using a signed-in account; signing out clears the session.
Preferences
The sidebar-state cookie and the two narration keys only record interface preferences. You can remove them by clearing cookies and site data for this site; the app still works without them.
Analytics
None. No product analytics, session-replay or heatmap tool is installed, and we do not set analytics cookies.
Marketing and advertising
None. There are no advertising pixels, conversion tags, retargeting scripts or third-party tracking cookies, and we do not share information for cross-context behavioural advertising.
Your controls
Because everything listed above is either strictly necessary or a single interface preference, there is no consent banner and no category toggle: we are not going to show you a switch that does nothing. You can always clear cookies and site data in your browser, or block them, though blocking the session storage will sign you out. If we ever add a non-essential technology, we will add a working consent control here and in Settings before it loads.
More information
See the Privacy Policy for the wider picture. A privacy contact route is being set up before launch (to be confirmed).