Cookie Policy
Updated October 23, 2026
We use a handful of first-party cookies and one piece of browser storage so sign-in works and we can remember this notice. We do not set advertising, analytics, or tracking cookies.
What we use
authjs.session-token
Keeps you signed in
Cookie · Session / a few weeks
authjs.csrf-token
Stops cross-site form attacks
Cookie · Session
authjs.callback-url
Where to send you after sign-in
Cookie · Session
authjs.state
Used for a few minutes during Google sign-in
Cookie · A few minutes
freeexam:consent
Remembers that you saw this notice and the disclaimer
localStorage · Until you clear it
On https, the sign-in cookies may start with __Secure- or __Host-. They are the same cookies.
Essential only
Sign-in cookies are strictly necessary. The consent entry only remembers that you closed the notice. There is no optional analytics or advertising cookie. Account mail, such as a password reset, is part of the account and is not turned on by a cookie.
Your choices
The notice on a first visit lets you read this list and accept. You can also block cookies in the browser. If you block the essential ones, sign-in will not work. Clearing site data removes the saved notice on this device.
Third parties
Google may set its own cookies if you use Continue with Google. That is Google's policy, not ours. We do not embed ad or analytics tags.
Related: Privacy Policy · Disclaimer