This policy explains exactly what cookies and browser storage Kurboed uses — and more importantly, what we don't use.
Our Commitment: No Tracking, No Analytics, No Advertising
Kurboed does not use analytics cookies (such as Google Analytics), advertising cookies, behavioral tracking pixels, social media trackers, or any third-party tracking technology. We only use the bare minimum cookies and local storage required to operate the platform securely. There are no cookie banners needed because we only use strictly necessary cookies.
Cookies are small text files stored on your device by your web browser. They help websites remember information about your visit, such as login status and preferences.
Local Storage (also called Web Storage) is a browser feature that allows websites to store data locally on your device. Unlike cookies, local storage data is not sent with every HTTP request — it stays on your device until explicitly cleared.
Below is the complete list of every first-party cookie our platform sets. There are exactly 3 first-party cookies:
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
kurboed-student-key | Stores the currently selected student profile ID so parents can switch between their children's profiles | Essential | Session |
sidebar:state | Remembers whether the navigation sidebar is open or collapsed (stores "true" or "false") | Functional | 7 days |
kurboed-student_{userId} | Temporary cookie created during signup to associate a new student profile with the parent account. Contains student name and grade level | Essential | 1 day (auto-deleted) |
Note: None of these cookies contain children's personal information that could be used for tracking. The student key cookie stores only an internal ID, not names or other identifiable information.
We use browser local storage for authentication tokens only. There are exactly 3 first-party local storage items set by our application. Amazon Cognito (our authentication provider) may additionally set its own secure session items during sign-in, which are used solely to maintain your login session:
| Storage Key | Purpose | Cleared When |
|---|---|---|
kurboed-refresh-session | Stores the refresh token for maintaining your login session | On sign-out |
kurboed-access-session | Stores the short-lived access token for authenticating API requests | On sign-out / auto-refreshed |
kurboed-id-session | Stores the ID token containing user identity information for the current session | On sign-out |
Security Note
Authentication tokens are required to keep you securely logged in. Clearing your browser's local storage will log you out and require you to sign in again. These tokens do not contain children's educational data.
To be fully transparent, here is what our platform does not use:
The following third-party service may set its own cookies on your device during specific interactions:
Used only during account registration to verify that signups are made by real humans, not automated bots. Google reCAPTCHA may set its own cookies. This is subject to Google's Privacy Policyand Terms of Service.
We use Amazon Cognito for secure user authentication. During sign-in and session management, the AWS Cognito SDK may store authentication state in your browser's local storage or set secure, HttpOnly cookies. These items are used exclusively to maintain your secure login session and are never used for advertising or cross-site tracking. See Amazon's Privacy Notice.
We load the Quicksand font from Google Fonts. Google Fonts requests may log standard web server access information (IP address, browser type) but Google states this data is not used for tracking users. See Google's Fonts Privacy FAQ.
You can manage cookies and local storage through your browser settings. Most browsers allow you to:
Because we use only essential cookies, disabling them will affect core functionality:
Since we only use strictly necessary cookies (as defined by privacy regulations), a cookie consent banner is not required. However, we disclose all cookies here for full transparency.
In compliance with applicable child privacy and data protection laws (including COPPA, CCPA, DPDP Act) and Google Families Policy:
We may update this Cookie & Storage Policy if we add or remove cookies/storage items, or to comply with new legal requirements. When changes are made:
For questions about our use of cookies and local storage, or this policy:
Also see our Privacy Policy for full details on how we handle personal information.