Cookie Policy

This policy covers cookies and similar browser storage used by the Studevia website and authenticated workspaces. It should be read with the Privacy Policy.

Studevia currently uses only storage needed to operate, secure, and remember basic preferences. It does not activate advertising, retargeting, behavioral profiling, or non-essential audience analytics cookies.

Short-lived access and refresh credentials are stored in protected HttpOnly cookies so browser scripts cannot read them. They are required to keep a user signed in securely and are cleared or revoked on logout.

A separate anti-CSRF cookie is readable by the application so it can send the matching request header and reject unauthorized state-changing requests.

These cookies are strictly necessary for account access and security. Their exact expiry follows the configured session lifetime, and server-side revocation may end them earlier after logout, a password change, an account-security event, or account deactivation.

Studevia may store the selected interface language and limited update-recovery state on the device so the interface remains usable between visits.

A private dashboard quick note may be stored locally on the user device. It is not a secure document store and users should not place passport numbers, bank details, credentials, or other sensitive personal data in it.

Preferences remain until changed by the user or cleared through browser controls.

Cloudflare Turnstile may use necessary browser signals or storage to distinguish legitimate requests from automated abuse. A payment provider may use necessary technology when checkout is opened to prevent fraud and complete payment securely.

These providers act under their own technical and legal requirements. Studevia will identify the production providers and link their notices before the related service is enabled publicly.

You can remove Studevia cookies and local storage using your browser settings. Removing necessary authentication storage will sign you out or prevent protected features from working.

If Studevia later introduces optional analytics or another non-essential technology, it will remain disabled until clear information and a consent choice are provided where required. Refusing optional storage will not block the core service.

Material changes to browser storage purposes, providers, or durations will be dated in this policy. Questions can be submitted through the Studevia contact page until a dedicated privacy address is published.