Policy
Cookies & local storage
Kuros Lab uses one cookie on the website, one secure storage entry on the mobile app, and no tracking cookies of any kind. There's nothing to opt out of, because we don't run anything that would warrant an opt-out.
In this policy
Cookies on the website
The kuroslab.com website uses one cookie, only when you sign in:
| Name | What it does | How long |
|---|---|---|
better-auth.session_token | Keeps your teacher account signed in across pages and visits. | 30 days, refreshed on use. Cleared on sign-out. |
It is a strictly necessary first-party cookie. It is set by us, used by us, and not shared with anyone else. The website doesn't function as a signed-in product without it.
Storage in the mobile app
The mobile app doesn't use cookies — phones don't really have them in the browser sense. Instead, the app stores a single session token in the device's secure storage:
- Android: EncryptedSharedPreferences (the OS-level encrypted store)
- iOS: Keychain (the OS-level secure credential store)
Same purpose as the website cookie: it keeps the teacher signed in. It's removed when you sign out, when you uninstall the app, or when the OS clears app data.
Kids using class codes have no persistent storage — every kid session starts fresh.
What we never use
- No analytics cookies. We don't run Google Analytics, Mixpanel, Amplitude, Heap, PostHog, or anything similar.
- No advertising cookies. We don't sell ads, so there are no ad-network trackers.
- No social-media tracking pixels. No Facebook Pixel, no LinkedIn Insight, no TikTok pixel.
- No A/B testing cookies. No Optimizely, no LaunchDarkly client SDK on the marketing site.
- No fingerprinting. We don't try to identify users by browser configuration, fonts, canvas rendering, or anything else.
This isn't a “we currently don't” list — it's a baked-in choice. If we ever needed to add measurement, we'd publish a 30-day notice to signed-in teachers and update this page first.
How to clear or opt out
Three options:
- Sign out — clears the session cookie / token immediately.
- Browser settings — block first-party cookies for kuroslab.com. Note: signing in won't work afterward, but the rest of the site will load fine.
- Mobile app uninstall — removes the secure-store entry along with the rest of the app.
Want more detail?
Email privacy@kuroslab.com. Our Privacy Policy covers the broader picture of data we hold.