Privacy Policy

cookie (“cookie”, “we”, “us”) is an AI-powered spaced-repetition study platform. This policy explains what data we collect when you use cookie, why we collect it, and the choices you have. If anything here is unclear, email us at support@cookie.education.

• Account information: your email address, a username, and a securely hashed password (or, if you sign in with Google, the basic profile info Google shares with us — we never see or store your Google password).
• Content you provide: source material you paste or upload to build decks (e.g. past-paper questions, mark schemes, textbook excerpts), the questions and answers cookie generates from it, and your own written answers.
• Usage & performance data:which questions you've answered, your scores, and spaced-repetition scheduling data — this is core to how the product works, not optional telemetry.
• Payment information: if you subscribe to Pro, payments are handled entirely by Stripe. We never see or store your card details — we only receive confirmation of your subscription status from Stripe.
• Device & push-notification data: if you opt in to push notifications, we store the subscription token your browser gives us so we can send them. We never collect this unless you explicitly opt in.

We use your data only to run and improve cookie:

• Generating exam-style questions from your source material and marking your answers.
• Scheduling what to review next, based on your performance.
• Processing your subscription and billing, if you're on Pro.
• Sending you emails or push notifications you've opted into (practice reminders, streak alerts) — every one of these is off by default and controllable from your account settings.
• Responding if you contact support.

We do not sell your data, and we do not use it to serve you ads.

We use a small number of third-party services to run cookie, each processing only what they need to do their specific job:

• Supabase — hosts our database, handles authentication, and stores uploaded files.
• Anthropic and/or OpenAI— process the source material and answers you submit in order to generate questions and mark your work. This is the core AI functionality of the product; without it, cookie can't do what it's for.
• Stripe — processes Pro subscription payments. See Stripe's own privacy policy.
• Resend — delivers transactional email (practice reminders, contact-form replies) on our behalf.
• Analytics — if enabled, we use a privacy-respecting, cookieless analytics tool that reports aggregate usage (e.g. which pages are visited) without tracking you individually across sites or setting a tracking cookie.

We don't share your data with anyone else, and none of these providers are permitted to use your data for their own purposes.

cookie sets exactly one cookie: a session cookie from our authentication provider (Supabase) that keeps you signed in. It's strictly necessary for the app to work and isn't used for tracking or advertising. We don't use any advertising or cross-site tracking cookies, so we don't show a cookie-consent banner — there'd be nothing meaningful to consent to.

Our database is hosted in the EU (Ireland). Anthropic and OpenAI, who process content for question generation and marking, are US-based companies — your submitted content is transferred to them for that specific processing.

We keep your data for as long as your account is active. You can permanently delete your account at any time from your account settings. Deleting your account immediately and permanently removes your profile, decks, questions, answers, and all associated data — this can't be undone. If you have an active Pro subscription, it's cancelled automatically as part of deletion.

If you're in the UK or EU, you have rights under GDPR (and equivalent rights may apply elsewhere) to access, correct, export, or delete your personal data, and to object to how we process it. You can exercise most of these yourself from your account settings (editing your profile, exporting or deleting your data); for anything else, email support@cookie.education.

cookie is intended for students preparing for school and university-level exams and is not directed at children under 13. If you believe a child under 13 has created an account without appropriate consent, contact us and we'll remove it.

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of cookie after a change means you accept the updated policy.

Questions about this policy or your data? Email support@cookie.education or use our contact form.