# Cookie notice

This page lists every cookie the app sets. There are few, and none of them
track you. The [privacy policy](privacy) covers the rest of your data.

## The cookies

| Cookie | What it is for | How long it lasts | Type |
|---|---|---|---|
| `sid` | Keeps you signed in. | 30 days, or until you sign out | Strictly necessary |
| `oauth` | Carries a one-time code while you sign in with Google. | 10 minutes | Strictly necessary |
| `signup` | Carries your Google sign-up to the page where you confirm your age and accept the terms. | 10 minutes | Strictly necessary |
| `signup_invite` | Carries an invitation through a Google sign-up. | 10 minutes | Strictly necessary |
| `share_next` | Carries a course's share link through the two-factor step or Google sign-in, so you land on the course after. | 10 minutes | Strictly necessary |
| `twofa` | Holds a sign-in while it waits for your two-factor code. | 10 minutes | Strictly necessary |
| `lang` | Remembers the language you picked for the app. | 1 year | Functional |
| `tz` | Your time zone, so streaks and the daily goal follow your local day. Set when you start a Sprint session. | 1 year | Functional |

The sign-in cookies are deleted as soon as that step is done. Only the
app reads these cookies, and none of them is sent to anyone else.

## What is not a cookie

Some settings, such as the voice you chose for listening or whether sound
is on, are kept in your browser's local storage. They stay on your device
and are never sent to us.

## What we don't use

No analytics, advertising or third-party cookies. The app loads every
script, font and stylesheet from its own server.

## Why there is no cookie banner

Every cookie above either makes the site work or remembers a choice you
made, so nothing needs your consent and there is nothing to accept or
refuse.

## Do Not Track and Global Privacy Control

Your browser may send a Do Not Track or Global Privacy Control signal. It
changes nothing here, because nothing on the site tracks you.

## Clearing cookies

You can delete cookies in your browser's settings, usually under Privacy
or Site data. Deleting `sid` signs you out. Deleting `lang` puts the app
back in your browser's language. The app sets `tz` again the next time
you start a Sprint session.