This page explains the small bits of information StudyCove stores on your device — cookies and similar technology — in plain language. It sits alongside our Privacy Policy, which covers everything else we do with your data.
StudyCove is run by Eric Aytekin, a sole trader based in England & Wales. You can reach us at hello@studycove.app, and a postal address is available on request.
We've written this so a 16-year-old can follow it, because that's who StudyCove is for. You can use StudyCove from age 16. Because everyone using it is under 18, we treat you as a child under the UK's rules for online services (the ICO Children's Code) and keep this notice short, clear and honest about what each technology does and how to switch it off.
The short version
- StudyCove uses only strictly-necessary storage plus your own saved display settings.
- We do not use advertising cookies, cross-site tracking, or any "follow you around the web" technology.
- Because we set no cookies that need your consent, we don't show a cookie consent banner.
- The only "tracking" we do is anonymous, aggregate page analytics that sets no cookie and stores no identifier on your device.
- For the two non-essential things — remembering your display settings, and the anonymous page analytics — you can switch each one off in your browser, free, and we tell you exactly how below. (We're honest about this: there isn't an in-app off switch for these yet — the browser is the way to say no — and we explain that in each section.)
- You can clear everything we store using your normal browser settings (see "How to clear it"). Clearing the sign-in cookie just signs you out.
What cookies and local storage actually are
A cookie is a tiny text file a website asks your browser to keep. Each time you go back to the site, your browser sends that file back, so the site can recognise your device — for example, to remember that you're signed in.
Local storage (and "session storage") is a similar idea: a small space in your browser where a site can save information on your device. It isn't technically a cookie, but the law treats it the same way — any time a site stores information on, or reads information from, your device, the same rules apply. So we include it here too.
Some of these technologies are strictly necessary — the site literally can't do the basic job you asked for without them (like keeping you logged in). Strictly-necessary storage doesn't need your consent, because removing it would break the thing you're trying to use.
A couple of other things aren't strictly necessary but are still low-risk — remembering how you like the app to look, and counting anonymous page views. The law lets us run these without a consent banner only if we tell you clearly what they do and give you a simple, free way to say no. We tell you clearly below, and the free way to say no is your browser — which works for everyone, including before you sign in. Anything beyond that — like advertising or cross-site tracking — would need your active permission first, and StudyCove doesn't use anything in that group at all.
Everything StudyCove stores on your device
Here's the full list. For each one we tell you what it is, what it's for, whether it's a cookie or another kind of device storage, whether it's strictly necessary, and how long it lasts.
Sign-in cookies (Supabase)
- Names:
sb-…-auth-token, plus a short-lived …-code-verifier used while you're logging in.
- Type: cookies, set by our sign-in provider (Supabase). They are
httpOnly (JavaScript on the page can't read them), secure (only sent over HTTPS) and sameSite=lax.
- What they're for: keeping you signed in as you move between pages, and finishing the login handshake securely. Without them you'd have to log in again on every single click.
- Strictly necessary? Yes. The service can't authenticate you without them, so we set them without asking — that's allowed for essential cookies.
- How long: the sign-in token lasts for your session and is refreshed while you stay active; the login
code-verifier is deleted as soon as login finishes. Signing out (or clearing cookies) removes them.
Site password cookie (only on a locked preview)
- Name:
studycue-gate.
- Type: a cookie, set only if we've put the whole site behind a temporary access password (we sometimes do this for a private preview or while testing).
- What it's for: remembering that you entered the site password, so you don't have to type it again on every page.
- Strictly necessary? Yes, when the password lock is on — the lock can't work without it. On the normal public site it's never set.
- How long: up to 30 days, or until you clear your cookies.
Your display settings (studycue-store)
- Name:
studycue-store, in your browser's local storage (not a cookie).
- What it's for: remembering how you like StudyCove to look on this device — your light/dark theme, your accent colour, and small bits of layout state — and holding any work-in-progress drafts (like an answer or essay you're part-way through) so a page reload doesn't lose them. It stays on your device and isn't a profile of you.
- Is it strictly necessary? No — the app would still work without it; you'd just have to re-pick your theme each time. So instead of treating it as essential, we rely on the rule that lets us remember your own display preferences as long as we tell you and give you a free way to opt out.
- How to switch it off: clear it, or block storage for StudyCove, in your browser — see "How to clear it" below. We'll be straight with you: there isn't a one-tap toggle inside StudyCove for this yet, so the browser is the way to turn it off. Once you clear or block it, StudyCove simply uses the default look each visit. If we add an in-app switch later, we'll update this page.
- Not a profile. This storage is not used to build any profile about you — the study insights StudyCove creates are a completely separate thing, explained in the Privacy Policy, and are not stored here.
- How long: it stays until you clear it or block it through your browser.
Cloudflare Web Analytics
- What it is: a privacy-first page-view counter from Cloudflare. It sets no cookie and stores no identifier on your device.
- What it's for: counting things like how many people visited a page, so we can understand and improve StudyCove. It's configured to produce aggregate numbers only — it doesn't single you out, and it's never used for advertising.
- Where it runs: on every StudyCove page, including the public pages you can see before signing in. We mention that because it means the way to say no has to work for everyone — signed in or not — which is why it's a browser control (see below), not something hidden behind a login.
- Is it covered by these rules? To count a visit, it sends back a small amount of information your browser/device gives out automatically (such as the page address and basic browser details). Because that involves reading information from your device, we treat it as covered by the cookie rules and rely on the exception for anonymous, statistical measurement — which, like display settings, is allowed only if we tell you clearly (we just have) and give you a simple, free way to opt out.
- How to switch it off: use your browser, or a browser extension, to block analytics scripts — specifically the Cloudflare insights beacon (
static.cloudflareinsights.com). Most privacy browsers and content blockers do this in one click, and it works for everyone, including before you sign in. We'll be honest: there isn't an in-app toggle for this yet; the browser is the genuine way to opt out today. If we add an in-app switch later, we'll update this page.
- How long: nothing is stored on your device, so there's nothing here for you to clear. (This is only the anonymous page-counter. Some product usage — which feature you used and when — is recorded on our servers and linked to your account; that isn't device storage, so it's covered in the Privacy Policy, not here.)
What we don't use
We want to be clear about this:
- No advertising cookies. We don't run ads, so we don't set ad cookies.
- No cross-site or third-party tracking. Nothing we use follows you onto other websites or builds an advertising profile.
- No non-essential marketing cookies. We used to set small marketing-attribution cookies; those have been removed. We now work out how you found us, at the moment you sign up, from the web address you arrived on — with nothing stored on your device. (More on that in the Privacy Policy.)
Because we don't set anything that legally needs your active consent — the two non-essential items above each come with a clear notice and a free way to say no in your browser — we don't show a cookie banner.
How to clear it, and what happens
You're always in control. You can remove everything StudyCove stores, and block the analytics beacon, using your browser's own settings — no special tool, and no need to be signed in.
- Chrome: Settings → Privacy and security → Clear browsing data → tick "Cookies and other site data".
- Safari: Settings/Preferences → Privacy → Manage Website Data → remove StudyCove.
- Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data.
- Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data.
Most browsers also let you clear data for a single site, or block storage and scripts from specific sites, if you'd rather not wipe everything. A content-blocker extension can block the analytics beacon by default.
A few things to know before you do it:
- Clearing the sign-in cookie signs you out. That's expected — just log back in. Nothing in your account is lost.
- Clearing local storage resets your display settings and discards any unsaved drafts on this device. Your theme and accent colour go back to the defaults, and anything you were part-way through but hadn't saved or submitted (like a draft answer) is cleared. Your saved study data lives in your account, not on your device, so that's untouched.
- The anonymous analytics: clearing cookies won't change it (it stores nothing on your device anyway) — block the
static.cloudflareinsights.com beacon with your browser or an analytics-blocking extension to turn it off.
Questions or concerns
If anything here isn't clear, or you want to raise a concern, email us at hello@studycove.app (postal address available on request). You can also contact the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113 — though we'd appreciate the chance to help first.
For the full picture of what data StudyCove collects and why — including the AI features and how we handle your study content — please read our Privacy Policy.
Changes to this policy
If we ever start using a new kind of cookie or device storage, we'll update this page and, where it matters, tell you in the app before the change takes effect. If we ever introduced anything that needs your active consent, we'd ask for it first. And if we add in-app off switches for display settings or analytics, we'll update the relevant sections here so this notice always matches what the app actually does.