Cookie Policy

1. What cookies are

Cookies are small text files a website stores in your browser. Browser storage ("local storage") is similar, but it stays on your device and isn’t sent to our servers. Both can be used for essential things, like keeping you signed in, or for tracking. GenKid uses them only for essential things.

2. Cookies we set

All of these are first-party cookies set by genkid.app. They are "http-only", which means they can’t be read by scripts on the page, and they are sent only over secure connections.

Cookies set by GenKid
Name	What it does	How long
`gk_session`	Keeps you signed in. It holds a random token; we keep only a hashed copy. Set when you sign in and removed when you sign out.	14 days, or until you sign out
`gk_oauth`	Only if you use ’Sign in with Google’: protects the sign-in from forgery (encrypted state and security codes). Removed as soon as Google sends you back.	10 minutes
`gk_google_pending`	Only when creating a new account with Google: remembers, encrypted, the name and email Google gave us while you finish signing up.	15 minutes

3. Settings saved in your browser

These are saved in your browser’s local storage on your device only. They aren’t sent to us and contain no personal information.

Local storage used by GenKid
Name	What it does	How long
`theme`	Remembers whether you chose light, dark or system theme.	Until you clear it or change it
`genkid:appearance`	Remembers display and accessibility settings you choose, such as accent colour, background tint, text size, readable font, spacing, reduced motion and contrast.	Until you clear it or change it

The preview where learners run their code is sandboxed: it can’t set cookies, use storage or read anything from GenKid.

4. Cookies set by others

Stripe. When you pay or manage billing, you go to Stripe’s checkout or billing portal (on checkout.stripe.com and billing.stripe.com). Stripe sets its own cookies there, mainly to prevent fraud and keep payments secure. See Stripe’s cookie policy.
Google. If you choose "Sign in with Google", you sign in on Google’s own pages, which use Google’s cookies under Google’s policies.

We don’t embed third-party trackers, social media buttons, advertising or analytics scripts on GenKid.

Under the UK Privacy and Electronic Communications Regulations (PECR) and similar laws elsewhere, websites need consent for cookies unless they are strictly necessary to provide a service you have asked for. Our sign-in and security cookies are strictly necessary, and our browser storage only saves settings you choose yourself. So we don’t need to ask for consent, and we don’t show a cookie banner. If we ever want to use any other kind of cookie, we’ll ask you first.

6. How to control cookies

You can view, block or delete cookies and local storage in your browser’s settings. If you block or delete gk_session, you won’t be able to stay signed in. If you clear local storage, your display settings return to the defaults.

7. Changes and contact

If we change the cookies we use, we’ll update this page and the date at the top. Questions? Email hello@genkid.app or see our Privacy Policy.