Cookie & Web Technologies Policy

Draft for review — not yet in effect.

What this policy covers

Cookies are small files that a website stores in your browser. Apps can store similar information on your phone. This policy lists every cookie and storage item Mauli Classes uses, and why.

The short version

• We use only what is strictly needed to keep you signed in securely.
• We do not use analytics, advertising, social media or tracking cookies.
• We do not use any third-party scripts that set cookies.

The website (admin.mauliclasses.com)

The public pages, such as this policy and the other legal pages, can be read without signing in. Signing in on the website, for example in the Teacher's portal or on the Delete Your Account page, sets the cookies below.

Sign-in cookie

• Name: sb-PROJECT-auth-token, where PROJECT is our Supabase project identifier. If the sign-in information is long, it is split into numbered parts (for example, ending in .0 and .1).
• Set by: Mauli Classes (first-party), using Supabase's sign-in system.
• Purpose: keeps you signed in, by holding your sign-in session.
• Type: strictly necessary. Without it you cannot sign in.
• How long: up to 400 days, unless you sign out sooner.
• Settings: sent only over secure (HTTPS) connections, and only for our own site (SameSite=Lax). The sign-in system's own code in the page reads it, so it is not marked "HttpOnly"; this is how the sign-in library we use is designed.

Password-reset cookie

• Name: sb-PROJECT-auth-token-code-verifier.
• Purpose: may be set for a short time while you reset your password, to confirm that the reset is completed in the same browser that started it.
• Type: strictly necessary.
• How long: short-lived, only for the password-reset step.

Other browser storage

The website does not store anything else in your browser, such as local storage or session storage.

The mobile app

The Mauli Classes app does not use cookies. To keep you signed in, it stores your sign-in session on your phone in encrypted form; the key to unlock it is kept in the phone's secure storage (the Keychain on iPhone and iPad, secure key storage on Android). This information stays on your phone and is used only to keep you signed in.

The app does not use an advertising identifier and does not include any analytics, advertising or crash-reporting tools.

Why there is no cookie banner

Because we use only cookies that are strictly necessary to provide the service you ask for, signing in, we do not show a cookie consent banner. There is nothing optional to switch on or off.

If we ever add any cookie or technology that is not strictly necessary, such as analytics, we will update this policy first and ask for your choice before using it.

Managing cookies

You can delete cookies in your browser settings at any time. If you delete the sign-in cookie, you will be signed out and will need to sign in again. Blocking it will stop you from signing in.

Questions

Write to Mauli Classes (operated by Rani Mayur Gaikwad) at support@mauliclasses.com