COOKIE POLICY.
1. In short
IKSHA uses a few cookies and browser-storage items that the site needs to work, such as keeping you signed in. Two optional things run only if you allow them: analytics without cookies, and a list of concepts you viewed recently. IKSHA does not use:
- Marketing or advertising cookies
- Cross-site tracking or tracking pixels
- Selling or sharing browsing data with advertisers
Change your choice any time in Cookie settings. The footer links to it on every page.
2. Strictly necessary
Always on. Without these you couldn't sign in, and the site couldn't protect itself or remember your settings.
| Name | Type | Purpose | Provider | Lasts |
|---|---|---|---|---|
sb-hexmcxdkqogxiriqmzca-auth-token (may be split into .0, .1 …) | Cookie First party | Keeps you signed in. Holds your session tokens. Only after you sign in. | IKSHA (Supabase Auth library) | Up to 400 days, or until you sign out |
sb-hexmcxdkqogxiriqmzca-auth-token-code-verifier (and …-flow-<id>-code-verifier, …-flows-code-verifier) | Cookie First party | One-time security value that completes Google sign-in safely (PKCE). Only when you start Google sign-in. | IKSHA (Supabase Auth library) | Up to 400 days (the value is used once) |
iksha-maint-bypass | Cookie First party | Lets the IKSHA team use the site while it is in maintenance mode. Only during maintenance, only for staff. | IKSHA | Set by the team; never set for learners |
iksha-lab-gate | localStorage First party | Counts free lab time for signed-out visitors so the sign-in limit works. When you use a Playground lab while signed out. | IKSHA | Until you clear site data |
iksha-consent | localStorage First party | Remembers your choices on this page, so we don't ask again. When you choose on the privacy notice or /cookie-settings. | IKSHA | Until you change it or clear site data |
iksha-theme | localStorage First party | Remembers the light or dark theme you picked. Only when you switch theme. | IKSHA | Until you clear site data |
iksha-lesson-style | localStorage First party | Remembers the lesson reading style you picked. Only when you change reading style. | IKSHA | Until you clear site data |
iksha-offline-v4 | Cache Storage First party | Stores the "You're offline" screen and the IKSHA logo, so they can show without a connection. Holds no personal data. | IKSHA | Replaced when the site updates it |
3. Functional (optional, off until you allow it)
| Name | Type | Purpose | Provider | Lasts |
|---|---|---|---|---|
iksha-recent-concepts | localStorage First party | Remembers the last few concept pages you opened, for the "Continue exploring" strip on Explore. Stays in your browser. Only if you allow Functional storage. | IKSHA | Until you turn it off here or clear site data |
4. Analytics (optional, off until you allow it)
| Name | Type | Purpose | Provider | Lasts |
|---|---|---|---|---|
Cloudflare Web Analytics beacon | Script (no storage) Third party | Counts page views and page speed. Sets no cookies and no local storage. Only if you allow Analytics. | Cloudflare | No storage on your device |
Until you allow Analytics, a small script at the top of every page stops Cloudflare's analytics script before it sends anything.
5. Cookies other companies set
Some services we rely on set cookies on their own domains. We don't control them, and they follow those companies' policies:
- __cf_bm, Cloudflare, on supabase.co (Supabase's network): When your browser talks to Supabase to sign in or save progress. Bot protection, about 30 minutes..
- Google account cookies (for example __Host-GAPS), Google, on accounts.google.com: Only on Google's own sign-in pages, if you choose Continue with Google.
The Cloudflare Turnstile bot check and the Google Fonts service load from Cloudflare's and Google's servers. We saw no cookies set by either during our checks. They do receive your IP address and browser details.
6. Your controls
Use Cookie settings for optional items. To remove everything, clear this site's data in your browser settings. That signs you out and resets your theme and lab timer. Your choice is kept in this browser only, so on another device you choose again.
7. Contact
Questions: privacy@goiksha.com. The Privacy Policy explains what happens to account data.