Cookie Policy
Last updated: August 2026
This page lists every cookie STEMEngine AI sets, explains what each one is for, and lets you change your choices. We deliberately do not show a consent pop-up on every page — instead, the controls live here permanently, and the defaults are set conservatively for visitors in regions where consent is legally required.
1. What cookies are
Cookies are small text files a website stores in your browser. Some are required for the site to function at all — without them we could not keep you signed in. Others are optional and only help us understand how the product is used.
2. The three categories we use
- Essential — authentication, form security and secure checkout. These cannot be switched off, because disabling them would sign you out and break payment.
- Analytics — Google Analytics 4. Used only to see which features teachers use and where they run into trouble. Never used for advertising, and the data is never sold or shared with advertisers.
- Functional — reserved for optional conveniences like remembering interface preferences. We do not set any cookies in this category today. The control exists so your preference is already on record if we ever add one.
3. What we do not do
- No advertising or retargeting pixels of any kind.
- No social media tracking cookies.
- No cross-site tracking, data brokers, or sale of usage data.
- No student data collection — STEMEngine AI accounts belong to educators.
4. Cookies we set
| Cookie | Set by | Category | Purpose | Retention |
|---|---|---|---|---|
| next-auth.session-token | STEMEngine AI | Essential | Keeps you signed in to your account between page loads. | 30 days |
| next-auth.csrf-token | STEMEngine AI | Essential | Protects sign-in and account forms against cross-site request forgery. | Session |
| next-auth.callback-url | STEMEngine AI | Essential | Returns you to the page you were on after signing in. | Session |
| __stripe_mid / __stripe_sid | Stripe | Essential | Fraud prevention during checkout. Set only when you open a payment page. | 1 year / 30 minutes |
| _ga | Google Analytics | Analytics | Distinguishes one visitor from another so visit counts are not double-counted. | 2 years |
| _ga_<container-id> | Google Analytics | Analytics | Stores session state for the Google Analytics 4 property. | 2 years |
We also use your browser's local storage to remember your choice on this page (stemengine_cookie_consent) and, inside the lesson editor, to keep drafts from being lost. Local storage is not sent to our servers.
5. Why you do not see a consent banner
Consent pop-ups get in the way of teachers who are usually mid-task, so instead of interrupting every visitor we set the default by region. If your browser indicates you are in the EU, EEA, UK or Switzerland, analytics stays switched off until you turn it on above — the Google Analytics script is not loaded at all. Everywhere else, analytics is on by default and you can switch it off above at any time. Essential cookies are exempt from consent requirements in both cases.
Because your choice is stored in your browser, it applies per browser and per device, and clearing your browser data will reset it to the regional default.
6. Managing cookies in your browser
You can also block or delete cookies through your browser settings. Blocking essential cookies will prevent you from signing in or completing a purchase.
7. Contact
Questions about this policy or a district compliance review? Email [email protected].