Back to EduPath

Cookie Policy

Effective: October 23, 2026

This Cookie Policy explains how EduPath uses cookies and similar technologies (collectively, "cookies") when you visit our website. For information about how we use the data collected via cookies, see our Privacy Policy.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to remember your actions and preferences over time. EduPath uses both first-party cookies (set by us) and third-party cookies (set by our service providers, e.g., Supabase for authentication).

2. Types of Cookies We Use

We categorize our cookies into three types: • Strictly necessary: Required for the Service to function. These cannot be disabled. They handle authentication (login sessions), language preference, and security (CSRF tokens). • Analytics (optional): Help us understand how students use EduPath so we can improve it. Only set if you accept analytics cookies via our consent banner. • Functional (optional): Remember your preferences (theme, saved filters) for a better experience.

3. Specific Cookies We Use

Strictly necessary: • sb-access-token, sb-refresh-token: Supabase authentication session. Expires after 7 days. • locale: Stores your language preference (en or ar). Expires after 1 year. • csrf-token: Prevents cross-site request forgery. Session cookie. Analytics (only with consent): • posthog_distinct_id: Anonymous user identifier for PostHog analytics. Expires after 1 year. • posthog_session: Session grouping for PostHog. Expires after 30 minutes. Functional: • edupath-cookie-consent: Records your cookie consent choice. Expires after 1 year. • edupath-theme: Stores your light/dark theme preference. Expires after 1 year.

4. Third-Party Cookies

We use the following third-party services that may set cookies: • Supabase: Authentication (essential). Their cookies are required for login. • PostHog: Analytics (only with your consent). Their cookies track anonymous usage. • Google (OAuth): If you sign in with Google, Google may set cookies during the authentication flow. We do not control Google's cookies — see Google's privacy policy. We do NOT use advertising cookies or tracking pixels from Facebook, Google Ads, or similar platforms.

5. Managing and Deleting Cookies

You can control cookies in several ways: • Our consent banner: When you first visit EduPath, you can accept or decline analytics cookies. You can change your choice anytime by clearing your browser's localStorage and reloading the page. • Browser settings: Most browsers allow you to refuse cookies or delete existing ones. See your browser's help documentation. • Opt-out of all analytics: Use our consent banner's "Decline" option. We will not set any analytics cookies. Note: If you disable strictly-necessary cookies, you will not be able to log in or use EduPath's interactive features.

6. Changes to This Policy

We may update this Cookie Policy when we add or remove cookies. We will notify you of material changes by posting a notice on the EduPath homepage 30 days before the change takes effect.