ExamPlatform

Cookie Policy

Last updated: [EFFECTIVE_DATE]


What are cookies

Cookies are small files stored in your browser when you visit a website. They allow the site to remember your session, preferences, and certain actions.

We also use localStorage — browser-side storage that never leaves your device — for exam-in-progress state, offline answer backup, and your cookie consent preference. localStorage entries are not transmitted to our servers.

Additionally, during live exams we use device fingerprinting (a hash of browser and network characteristics) to detect multi-account cheating. This is a strictly necessary security measure.

Cookies we use

NameTypePurposeExpiryCan you opt out?
accessTokenStrictly necessaryAuthenticates your login session with the API1 hourNo — without this you cannot log in
refreshTokenStrictly necessarySilently renews your access token without prompting a new login30 daysNo — clears on logout
exam:session:{id} (localStorage)Strictly necessaryStores in-progress exam state so a tab refresh doesn't lose your answersExam durationNo — clears when exam ends
exam:offline:{id} (localStorage)Strictly necessaryOffline answer backup in case of network loss during an exam24 hoursNo
pwa-dismissed (localStorage)FunctionalRemembers if you dismissed the "Install app" prompt7 daysAuto-expires
cookie-consent (localStorage)FunctionalStores your cookie consent choice ("all" or "necessary")1 yearClear via browser dev tools to reset
ph_* (PostHog)AnalyticsUsage analytics — which pages you visit, which exams you start, feature interaction1 yearYes — choose "Necessary only" in the cookie banner

Third-party cookies

Google (Firebase FCM): If you enable push notifications, Firebase registers a service worker and stores a notification token on your device. This token is required to deliver exam result and new exam notifications. You can revoke it at any time in Dashboard → Notification settings → Disable push notifications. Firebase's privacy policy: firebase.google.com/support/privacy.

PostHog: If you accepted analytics cookies, PostHog places a ph_* cookie to track anonymous usage. No personally identifiable information is sent unless you are logged in and we have identified you. PostHog privacy policy: posthog.com/privacy.

Your choices

On first visit: choose Accept all or Necessary only in the cookie banner at the bottom of the page.

Changing your preference: open your browser's developer tools (F12), go to Application → Local Storage, delete the cookie-consent key, then refresh the page. The banner will reappear.

Choosing Necessary only disables PostHog analytics. All platform features continue to work normally — your exam results, scorecard, and notifications are not affected.

Important: setting your browser to block all cookies will prevent you from logging in, because our authentication relies on an accessToken HTTP-only cookie which is strictly necessary.

Contact

Questions about our use of cookies or your privacy preferences: [SUPPORT_EMAIL]

For formal complaints, use our Grievance Form.