Essential storage
Authentication cookies keep signed-in sessions secure. A CSRF cookie prevents forged account actions. Session storage protects guest attempts and Admin sessions. Local storage supports anonymous question freshness, pending-answer recovery, unsaved Admin drafts, and your consent record. These functions are necessary to provide requested features and cannot be disabled through the consent panel.
Optional analytics
When enabled by site configuration and affirmatively accepted, Google Analytics may receive minimized event names and broad context such as route, practice mode, subject, grade, interaction type, and authenticated status. We configure IP anonymization and disable Google Signals. Optional analytics receives no raw answers, question text, names, emails, profile identifiers, or session secrets.
Choice and withdrawal
Rejecting optional analytics does not limit practice, accounts, or mocks. You can reopen Privacy choices from every page footer and withdraw consent prospectively at any time. Global Privacy Control is honored as an opt-out and keeps optional analytics disabled.
Retention
The consent record stays in your browser until removed or replaced by a newer policy version. Session and recovery storage is removed when its purpose ends, when you sign out, or when browser controls clear it. Third-party analytics retention, when consented to, must be configured in the analytics provider account and disclosed here before launch.