Cookie Policy

Cookies are small files stored by your browser when you visit a website. They let the site remember things between visits (like staying signed in) and help us measure how the site is used. Some cookies are first-party (set by EduPortal) and some are third-party (set by a service we use, like Stripe for payments). All cookies we use are listed below.

**Essential cookies** — Required for the site to function. These keep you signed in, remember your theme, and protect against CSRF attacks. You can't opt out of these without breaking core functionality. **Preference cookies** — Remember your settings: language, theme (light/dark), notification preferences. These don't track you across sites. **Analytics cookies** — Help us understand how learners use EduPortal in aggregate. We use a privacy-friendly analytics provider that doesn't fingerprint users. **Payment cookies** — Set by Stripe when you reach a payment page. These help prevent fraud and are required to process payments. We don't use advertising cookies, retargeting cookies, or sell cookie data to third parties.

**eduportal_session** — Essential. Keeps you signed in. Expires after 30 days of inactivity. **eduportal_theme** — Preference. Remembers your light/dark theme. Expires after 1 year. **eduportal_csrf** — Essential. CSRF protection token. Session-only. **_plausible_unique** — Analytics. Counts unique visitors (no personal data). Expires after 24 hours. **__stripe_mid** / **__stripe_sid** — Payment (Stripe). Fraud prevention on checkout pages. Expires after 1 year / 30 minutes.

We respect the Global Privacy Control (GPC) signal. If your browser sends GPC, we automatically disable analytics cookies for you. We also honor "Do Not Track" headers where technically feasible.

Most browsers let you view, delete, and block cookies via Settings. You can also use Incognito / Private Browsing mode to start fresh each session. Note: blocking essential cookies will sign you out and may break parts of the site. We won't be able to remember preferences or keep you logged in. If you'd like to opt out of analytics specifically (while keeping the site working), you can do so from Settings → Privacy → Analytics.

When you watch a video, the player loads from a CDN (no cookies). When you start a Stripe checkout, Stripe sets its own cookies on its own domain. When you use Google sign-in, Google may set cookies on its own domain. We never embed third-party tracking pixels, ad networks, or social-media share widgets that load tracking by default.

When we change the list of cookies materially, we'll update this page and the "last updated" date at the top. For significant changes, we'll show a banner the next time you visit.