DRAFT — requires legal review before production use. WASL does not claim to be “fully GDPR compliant”. Some details are pending controller/legal input.
Cookie & Storage Policy
Last updated: 2026-10-17
WASL uses essential cookies and browser storage that the service needs to work. These don’t need your consent. We use analytics only if you say yes: it is off by default, you can refuse as easily as you accept, and you can change your mind at any time. We never use advertising or cross-site tracking cookies. Children’s (student) sessions never load analytics.
Essential (always on)
| Name | Purpose | Set by | Kept for |
|---|---|---|---|
wasl-auth (+ chunk variants) | Keeps you securely signed in | Supabase Auth (first-party) | Until you sign out / session expiry |
wasl-consent | Remembers your cookie choice | WASL | 6 months |
wasl-lang | Remembers the language you chose | WASL | 1 year |
wasl-tz | Shows class times in your time zone | WASL | 1 year |
wasl-org | Remembers which workspace you opened | WASL | 1 year |
wasl-act-as | Joins a live class on behalf of your child when you choose to | WASL | 6 hours |
wasl-pending-next (local storage) | Returns you to an invitation after confirming your email | WASL | Up to 7 days, deleted on use |
wasl-child-session (session storage) | Keeps analytics off in a child's session | WASL | Until the tab closes |
Analytics (only with your consent)
| Service | What it does | Storage |
|---|---|---|
| Vercel Web Analytics | Counts anonymous page visits. Addresses are cleaned first (ids, invitation codes and query strings removed). | No cookies. Loads a script from our own site only after you accept. |
If your browser sends a Global Privacy Control signal, we treat it as “no”. We ask again after 6 months or when this policy changes. If you are signed in, we keep a record of your choice (what, when, which policy version) as proof, which you can see under Privacy & data.
Third-party services
During a live class, the media provider (LiveKit) may use in-browser storage for the WebRTC session — needed for the class you joined. See our subprocessors. Error monitoring, rate limiting and email run on our servers and set no cookies in your browser.
Cookie Settings
You haven’t made a choice yet, so analytics is off.