What stays in your browser.
Essential sign-in storage, local learning drafts and optional counts have different purposes. There are no advertising cookies or third-party analytics scripts installed by the application.
Published 21 October 2026 · current independent pilot
Essential sign-in cookie
The __Host-op_session cookie holds an opaque sign-in token. It is Secure, HttpOnly and SameSite=Strict, scoped to the host and valid for up to 30 days. A hashed token is stored on the server. Signing out invalidates the current session. Necessary account functions cannot work with all cookies blocked.
Local drafts and preferences
Browser local storage keeps foundation and standalone activity drafts, self-review state and interface choices. Local drafts do not automatically sync to an account. Other users of the same browser profile may access them. Clearing site data can remove these drafts; export anything important first.
Optional acquisition counts
Optional first-party counts are off by default. If enabled, browser storage keeps the consent choice, a random identifier, first opt-in day and a broad source tag. These are separate from account-linked learning events. Global Privacy Control disables optional counting. Use the optional analytics controls to turn it off or request deletion; the privacy policy explains the 90-day suppression marker.
Managing stored data
Use the browser's site-data settings to clear local storage and cookies, understanding that this can sign you out and erase local drafts. Deleting a cloud account does not delete local browser data or downloaded files; clearing a browser does not delete cloud work. Downloaded HTML and JSON files are not encrypted.