DRAFT - needs legal review (draft, needs lawyer review). Prepared from an internal research pack, not legal advice. Must be checked by counsel in Nigeria, Ghana, Sierra Leone, The Gambia, Liberia and Switzerland before launch. Items in [brackets] are placeholders.
Cookies and storage
GradeRadar uses no advertising cookies and no third-party trackers. It stores data in your browser so the app works offline.
Version: 2026-10-draft · Controller: [COMPANY LEGAL NAME] · [PRIVACY EMAIL]
| Name | Type | Purpose | Category | Kept |
|---|---|---|---|---|
| sabi.v2.state | localStorage | Your practice history, settings and (if saved) local account details | Strictly necessary | Until you delete it |
| sabi-v2.* caches | Cache Storage (service worker) | App files and question packs for offline use | Strictly necessary | Until the next app version |
| sabi.session | sessionStorage | Short-lived signed token for AI features (no personal data) | Strictly necessary for AI features you use | Until the tab closes (max [6 hours]) |
| sabi.auth, sabi.sync.meta, sabi.cloudcfg | localStorage | Cloud account sign-in and sync status (only if you create an account) | Strictly necessary for the account | Until you sign out or delete the account |
| sabi.review.v1 | localStorage | A teacher’s review decisions on the review page | Strictly necessary for that page | Until cleared |
| __Host-graderadar_analytics | First-party, Secure, HttpOnly cookie | Recognises a consenting browser for visits and return visits | Optional analytics | 180 days; removed on withdrawal |
| graderadar.analytics.session | sessionStorage | Groups activity in this tab into sessions (30-minute inactivity boundary) | Optional analytics | Until the tab closes or consent is withdrawn |
| events (inside sabi.v2.state) | localStorage | Counts of feature and share-button use | Optional analytics: only if you accept | Deleted when you reject |
Your choice
The banner on first visit lets you accept or reject optional analytics; rejecting is as easy as accepting (GAID 2025 Art. 19). Change your choice any time with “Cookie settings” in the app footer. Strictly necessary storage cannot be switched off without stopping the app from working, but you can delete it in Settings or by clearing your browser data.
Shared analytics
Only after you accept the updated banner, we send page categories, subject categories and counts of practice starts, answers, completions, written submissions and shares to GradeRadar’s own analytics endpoint. We do not send your name, answer text, scores, question IDs, IP address or full page URLs as analytics fields. The server receives network metadata to deliver requests; the analytics database does not store it. Hosting security logs are separate.
The reporting window is 90 days. Older event records and browser identifiers inactive for 180 days are removed in bounded batches when the service is used. Withdrawing consent through Cookie settings deletes analytics linked to the current browser cookie, as well as the cookie itself. Other browsers must withdraw separately. Clearing the cookie first prevents us linking older events to your device for deletion.
The owner-only dashboard shows aggregate counts, not individual students. Browsers and returning visits are estimates, and exclude people who reject analytics. Earlier visits are not backfilled. Cloudflare hosts the site and D1 analytics storage. These analytics are first-party, with no advertising trackers.