This Policy explains what we store on your device, why, and how you control it. It sits alongside the Privacy Policy, which covers personal data more generally.

1. What we are talking about

Cookies are small text files placed in your browser. The same rules apply to comparable techniques — local storage, session storage and similar — and we use the word "cookies" for all of them here.

Some are set by us; some are set by the providers we use to run the Service. We do not use advertising cookies, and we do not sell or share data for advertising purposes.

2. What we use

Strictly necessary. These make the Service work: keeping you signed in, maintaining your session, protecting against cross-site request forgery, routing your requests, and enforcing rate limits. They are set by us and by Supabase, our authentication and database provider. They cannot be switched off, because without them you cannot sign in or use the application. We do not ask for consent for these, since they are necessary to provide the service you have asked for.

Typical duration: session, up to 12 months for the sign-in token.

Functional. These remember choices you have made: your theme preference (light, dark or system), your interface language, and interface settings such as whether a panel is collapsed. They exist only because you set something; if you clear them, the Service falls back to defaults.

Typical duration: up to 12 months.

Analytics and performance. We use Vercel Web Analytics and Speed Insights to see how many people use which part of the Service and how quickly pages load. These are designed to work without cookies and without cross-site identifiers: they do not follow you to other websites and do not build a profile of you. Where any storage on your device is involved, we ask for your consent first.

Typical duration: up to 14 months, or as set by the provider.

We do not use marketing or profiling cookies. If that ever changes, we will update this Policy and ask for your consent before setting any.

3. Your choices

When you first visit, a banner asks you to accept or refuse everything that is not strictly necessary. Refusing is as easy as accepting: both are single clicks on the same banner, with equal prominence. Refusing has no effect on your ability to use the Service.

You can change your mind at any time through the Cookie settings link in the footer. Withdrawing consent is as straightforward as giving it, and takes effect immediately for the future.

You can also manage cookies in your browser — Chrome, Firefox, Safari and Edge all let you view, delete and block them, including for a single site. Bear in mind that blocking strictly necessary cookies will prevent you from signing in.

4. Third parties

Where you sign in with Google, Microsoft or Apple, that provider may set cookies of its own during the sign-in process, under its own policies. The same applies to Stripe during payment. We have no control over those cookies and do not receive their contents.

5. Changes

We update this Policy when we change what we use. The current version is always available at https://www.quizypeasy.com/cookies, and the date at the top tells you when it was last revised.