Cookie Notice
Last updated: [PLACEHOLDER: date the operator publishes this version]
This notice explains the cookies and similar technologies (such as browser local storage and session storage) that CtrlAltRevise uses, and your choices. It sits alongside our Privacy Policy, which explains how we handle the personal data those technologies may involve. This notice is provided under the Privacy and Electronic Communications Regulations (PECR) and UK GDPR.
What we use
We keep this to a minimum. The tables below cover every cookie and item of browser storage the Platform places on your device, grouped by category.
Strictly necessary (no consent required)
These are required for the Platform to work — mainly to sign you in and keep your session secure. You cannot turn these off and still use your account.
| What | Type | Purpose | Roughly how long |
|---|---|---|---|
| Authentication session cookie | Cookie (HTTP-only, set by our app via Auth.js) | Keeps you signed in to your account | Session / until you sign out or it expires |
| CSRF / sign-in flow cookies | Cookie (HTTP-only, set by Auth.js) | Protects the sign-in process against cross-site request forgery and carries the callback URL during sign-in | Short-lived, used during authentication |
[PLACEHOLDER: confirm the exact cookie names emitted in production (for example the Auth.js session-token and CSRF-token cookies, including any __Secure-/__Host- prefixes) and list them here. The cookie names are set by the Auth.js library; this app does not override them — check the running app at sign-in time to confirm the exact names.]
Functional — browser local storage
These values are written to your browser's localStorage to remember your preferences and workspace state across visits. They are not sent to any third party and do not track you across the web. Deleting them resets the relevant preference to its default.
| Key | Purpose |
|---|---|
| car-theme | Remembers your light / dark / system theme choice |
| car-accent | Remembers your accent colour |
| car-pseudocode-editor-theme | Remembers your code-editor colour theme (light, dark, Dracula, high-contrast) |
| car-pseudocode-layout | Remembers the panel size proportions in the pseudocode workspace |
| ctrlaltrevise:dashboard-layout:v1 | Remembers the order and visibility of widgets on your dashboard |
Functional — browser session storage
These values are written to your browser's sessionStorage. They last only for the current browser tab and are deleted automatically when you close the tab or navigate away; they are never sent to any third party.
| Key | Purpose |
|---|---|
| quiz-state:<question-slugs> | Preserves your answer selections during an active quiz session so that a page refresh does not lose your progress |
Third-party providers
When you take a payment action we use Stripe, and when you choose social sign-in we use Google or Apple. Those providers may set their own cookies on their own pages as part of completing that action; their use is governed by their own cookie/privacy policies. We do not place advertising or analytics cookies on your device.
Analytics and advertising
We do not currently use any analytics, advertising, or cross-site tracking cookies or scripts. Because of that, no cookie consent banner is shown — none is required for strictly-necessary cookies or for first-party functional preferences.
If this changes: the moment we add any non-essential cookie or similar technology (for example website analytics), we will ask for your prior consent through a banner that lets you reject non-essential cookies as easily as you can accept them, and we will update this notice first. We will not load non-essential technologies before you have agreed.
[PLACEHOLDER: if the operator adds analytics or any non-essential storage, implement a compliant consent banner (reject as easy as accept; no non-essential cookies before consent) and revise this notice. Note that EU/EEA visitors require consent for analytics cookies regardless of UK rules.]
Managing your stored data
You can delete or block cookies and clear local and session storage in your browser's settings, and use private/incognito browsing. Note:
- Blocking the strictly-necessary cookies will stop you from signing in.
- Clearing
localStoragewill reset your theme, accent colour, editor theme, workspace layout, and dashboard layout to their defaults. - Clearing
sessionStorage(or closing the tab) will discard any unsaved quiz-answer progress for the current session.
Contact
Questions about this notice: [PLACEHOLDER: privacy contact email].