Cookie Policy
Summary
We only use cookies that are essential for the app to work (authentication and sessions). Analytics cookies are only set if you consent. We never use advertising or tracking cookies. Most users outside the EU never see a cookie banner.
1. What Are Cookies?
Cookies are small text files that websites store on your device (computer, phone, or tablet) when you visit them. They help the website remember information about your visit — like your login status and preferences — so you don't have to re-enter them each time. For a broader view of how we handle your data, see our Privacy Policy.
Beyond cookies, websites may also use similar technologies like local storage (data stored in your browser that persists across sessions) and session storage (data that clears when you close the tab). We use these technologies as described below.
2. How We Use Cookies
EMStudio uses cookies and similar technologies for two purposes:
- Essential (always active): Authentication, session management, and security. These are required for EMStudio to function. Without them, you cannot log in or use the app. Learn more about our security practices on our Security page.
- Analytics (consent required): Understanding how teachers use EMStudio so we can improve the product. These are only activated if you give consent, and only in regions where consent is legally required.
3. Cookies We Use
Here is a complete list of every cookie and local storage item EMStudio sets:
Essential Cookies
These cannot be disabled — they are required for the app to work.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| sb-*-auth-token | Supabase authentication session | Session / 1 year | Supabase (1st party) |
| sb-*-auth-token-code-verifier | PKCE authorization flow verification | Session | Supabase (1st party) |
| x-user-country | Determines if cookie consent banner should be shown (country code only — not precise location) | 24 hours | EMStudio (1st party) |
Consent Storage
| Name | Purpose | Type | Provider |
|---|---|---|---|
| emstudio_consent_v1 | Stores your cookie consent choice (accepted/rejected, timestamp) | Local storage | EMStudio (1st party) |
4. Analytics (Consent Required)
The following analytics tools are only activated with your explicit consent in regions where consent is required (EU, UK, EEA, Switzerland, California), in accordance with the ePrivacy Directive and our GDPR commitments. In other regions, they are active by default but you can opt out at any time.
| Service | Purpose | Data Collected | Privacy Policy |
|---|---|---|---|
| PostHog | Product analytics — understanding which features teachers use most | Page views, feature usage, anonymized interaction events. No student data. | posthog.com/privacy |
| Google Analytics | Marketing analytics — understanding how teachers find EMStudio | Page views, conversion events, referral source. No student data. | Google Privacy Policy |
When consent is required but not yet given, PostHog is fully blocked (no events sent). Google Analytics runs in Google Consent Mode v2 (cookieless mode — no cookies set, no personal data collected) until you consent, at which point it switches to full mode.
Neither PostHog nor Google Analytics ever receives student names, grades, attendance data, or any other student information.
5. Third-Party Cookies
EMStudio does not set third-party advertising or tracking cookies. However, when you interact with embedded content, the following third-party services may set their own cookies:
- YouTube — if a teacher embeds a YouTube video in a lesson, YouTube may set cookies. We use the privacy-enhanced embed mode (
youtube-nocookie.com) to minimize this. See YouTube's Privacy Policy. - Google/Microsoft document viewers — if a teacher previews a document via Google Docs or Office Online viewers, those services may set cookies.
- Stripe — when you enter payment information, Stripe sets cookies necessary for fraud prevention and payment processing. See Stripe's Privacy Policy.
These services have their own cookie and privacy policies. We do not control the cookies they set. For a complete list of all vendors, see our Sub-Processors page.
6. Our Consent Banner
If you are located in a region that requires cookie consent (EU, UK, EEA, Switzerland, or California), you will see a consent banner on your first visit. Our approach to consent is detailed in our Transparency report. The banner offers three options:
- Accept All — enables essential + analytics cookies
- Customize — lets you toggle analytics on or off while keeping essential cookies active
We commit to the following consent banner principles:
- All options are equally prominent — no dark patterns, no pre-checked boxes
- The banner does not block the page — you can use EMStudio before making a choice
- Your choice is remembered and respected across sessions
- You can change your preference at any time
If you are located outside a consent-required region (e.g., most US states, Asia, Latin America), you will not see a consent banner. Analytics run by default in those regions, consistent with local law.
7. Managing Your Preferences
In EMStudio
If you previously accepted or rejected analytics cookies and want to change your choice, you can clear your preference by clearing your browser's local storage for emstudio.pro, which will cause the consent banner to reappear on your next visit.
In your browser
Most browsers allow you to manage cookies through their settings. You can typically:
- View and delete existing cookies
- Block all cookies or only third-party cookies
- Set per-site cookie preferences
Common browser cookie settings:
Blocking essential cookies will break the app
If you block all cookies for emstudio.pro in your browser settings, you will not be able to log in or use EMStudio. Essential cookies are required for authentication.
8. Do Not Track
EMStudio respects the Do Not Track (DNT) signal. If your browser sends a DNT=1 header, we treat it the same as rejecting analytics cookies — PostHog will not load and Google Analytics will run in cookieless mode. No additional action is needed on your part.
9. Changes to This Policy
We may update this Cookie Policy if we add new tracking technologies or change how we use existing ones. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, reset cookie consent so you can make a fresh choice. Material changes are also summarized on our Transparency page.
10. Contact
For questions about this Cookie Policy or how we use cookies:
Education Management Studio
d/b/a EMStudio
Email: info@emstudio.pro
For data protection inquiries, you may also wish to review our Data Processing Agreement or our full list of Privacy Commitments.