Cookies & similar tech
This explains the cookies and browser storage Novari actually uses (no more, no less). We keep the list short on purpose: no advertising or cross-site tracking cookies, ever.
1. What This Covers
Novari is a web app, so "cookies" here really means two things: actual browser cookies, and localStorage: the similar browser storage a web app uses to remember things between visits. We cover both, since regulators (and honest disclosure) treat them the same way.
We don't use a cookie banner
Everything below is either strictly necessary to run your account (no consent required under most cookie laws) or off by default until you opt in via Settings. There's nothing to consent to on your first visit, so we don't show a banner for the sake of showing one.
2. Strictly Necessary Storage
These keep the app functional and can't be turned off without breaking the product, the same way logging out isn't optional once you're logged in.
Session & authentication (localStorage)
Supabase, our auth provider, stores your sign-in session in your browser's localStorage (not a cookie) so you stay signed in between visits. Without it, you'd have to log in on every page load.
App preferences (localStorage)
Small, non-identifying keys (like your last-used grade level for Kids Mode, onboarding progress, and UI preferences) so the app doesn't reset itself every time you open it.
3. Analytics (Optional)
We use PostHog for optional product analytics and masked tester session recordings, so we can understand which features get used and investigate bugs. Records may be linked to your pseudonymous tester account. Inputs and study content are masked, and console logging is disabled. We retain session recordings for 30 days. You can decline recording and still test the app, or withdraw permission in Settings → Privacy.
PostHog cookies & localStorage
PostHog sets a cookie and a localStorage entry to recognise your browser across visits and keep feature-flag assignments (like which version of a page you see) consistent. It does not carry your name or email, and we never sell this data.
Turn it off
Toggle "Usage Analytics" off in Settings → Account at any time. This stops new PostHog events from being sent and clears the assignment going forward.
4. Infrastructure & Delivery
Our site runs behind Cloudflare, which handles DNS, content delivery, and basic traffic security. Cloudflare may set its own cookie if it ever needs to distinguish a real visitor from automated traffic (for example, during a security check); we don't currently have that feature turned on, but Cloudflare's infrastructure supports it. Any cookie Cloudflare sets is for security and delivery, not for advertising or building a profile of you, and is governed by Cloudflare's own policies rather than ours.
5. Payments
When you upgrade, Paystack processes the payment on its own hosted checkout page. Paystack may set its own cookies during that checkout flow to prevent fraud and complete the transaction: those are set and controlled by Paystack, not Novari, under Paystack's own policies. We never see your card number.
6. Your Choices
- In-app: turn off Usage Analytics from Settings → Account → Data Management.
- Browser settings: block or delete cookies and site data anytime from your browser; note this will also clear the localStorage session that keeps you signed in, so you'll need to log back in.
- Do Not Track: we don't currently act on browser DNT signals, since PostHog analytics is already opt-in-controlled from Settings.
7. Changes
If we add a new cookie, storage key, or analytics provider, we'll update this page with a new effective date. We won't add advertising or cross-site tracking cookies without rewriting this policy first.
Contact
Questions about cookies or browser storage can be sent to our team. privacy@novaristudy.site.