1. Your choice
Essential cookies and local storage operate because the service cannot securely sign you in, remember your privacy choice, or provide requested interface settings without them. They are not used for advertising.
Google Analytics is optional and remains off until you choose “Allow analytics.” Rejecting analytics does not reduce product functionality. You can change your choice at any time:
2. Cookie inventory
| Name | Category | Purpose | Typical lifetime |
|---|---|---|---|
| access_token / __Host-access_token | Essential | Keeps an authenticated session. HttpOnly, so browser scripts cannot read it. | 15 minutes |
| refresh_token / __Host-refresh_token | Essential | Renews the signed-in session securely. HttpOnly. | 30 days |
| csrf_token / __Host-csrf_token | Essential | Helps prevent forged account-changing requests. | 30 days |
| oauth_state, oauth_pkce_verifier, oauth_financial_literacy, oauth_invitation_code | Essential | Secures and completes Google sign-in and carries your chosen learning level. | 10 minutes |
| copinance-has-session | Essential | A non-secret yes/no marker used for fast page routing; it is not an access token. | 30 days |
| copinance-theme, copinance-ui-scale | Functional | Remembers the theme and reading scale you requested. | 1 year |
| copinance-cookie-consent | Essential | Remembers whether you allowed or rejected optional analytics. | 180 days |
| _ga, _ga_C6D750MBJX (or similar property suffix) | Analytics—optional | Google Analytics distinguishes visits and maintains session state. Set only after consent. | Up to 180 days |
Cookie names can gain a secure __Host- prefix in production. Lifetimes are maximums: signing out, completing Google sign-in, browser limits, or clearing site data may remove them sooner.
3. Similar browser storage
Copinance also uses first-party local storage. It stays on your device until the app or you remove it; it is not automatically sent with web requests.
- Theme and interface scale keep the visual settings you selected.
- Recent glossary terms help Coach adapt explanations to concepts you recently explored.
- Selected AI model and active symbol restore your workspace choices.
- Return-to location briefly brings you back to the requested page after sign-in and is then removed.
- Cookie consent mirrors your analytics choice so the app can honor it before loading optional measurement.
4. Google Analytics
If you consent, Copinance loads Google Analytics 4 to understand aggregate page usage and product performance. The implementation disables advertising personalization signals, does not enable Google signals, and limits its first-party analytics cookies to 180 days without extending that deadline on every visit.
Google may receive device and browser details, approximate location derived from IP address, page URLs, timestamps, and interaction events. Google processes this information under its own terms and privacy documentation. Copinance does not use these cookies to show targeted ads.
5. Browser controls and consequences
Most browsers let you inspect, block, or delete cookies and site data. Blocking all cookies may prevent Google sign-in, session renewal, security checks, and saved display settings from working. Blocking only analytics has no effect on core features.
A browser’s “Do Not Track” signal has no single agreed technical standard. Copinance instead keeps analytics off until affirmative consent and honors the preference control above. We will update this section if legally recognized browser signals require a different response.
6. Updates and contact
We will update this inventory when storage practices change. For questions, contact [email protected]. For the broader treatment of personal data, see the Privacy Policy.