Skip to content

Last updated: July 2026

Cookie Policy

KeenClimb uses essential cookies, local storage, and browser cache needed for login, security, preferences, localization, and offline learning. Optional marketing or measurement providers load only when configured for the deployed site and should be enabled with the consent controls required in your region.

Essential authentication and security cookies

  • refresh_token: httpOnly session cookie used to keep an adult account signed in and rotate refresh tokens securely. It is set with SameSite=Strict and Secure in production.
  • csrf_token: anti-CSRF cookie used with request headers to protect state-changing account actions. It is not used for advertising or analytics.
  • NEXT_LOCALE: locale preference used by the web app to route visitors to the correct language version.
  • These cookies are necessary for account security, session continuity, and localization. Disabling them may break login, logout, refresh, or language routing.

Local storage preferences

  • cookie_consent: records that the banner was acknowledged so it does not reappear on every page.
  • keenclimb-theme: remembers light, dark, or system theme preference.
  • al_has_session: a non-sensitive flag that helps the app avoid unnecessary session refresh requests.
  • Experience or age-mode preference keys may remember the selected learning shell on the device.
  • Local storage can usually be cleared from browser settings; clearing it resets these preferences.

Offline lesson cache and service worker storage

  • KeenClimb may use the browser Cache API and service worker storage to load app assets, lesson JSON, and lesson media reliably.
  • Offline cache supports lesson continuity when a device has a weak or unavailable connection.
  • Cached lesson content is stored on the device and may remain until the browser, operating system, or app clears it.
  • On shared devices, families should sign out and clear browser data when they no longer want local lesson data on that device.

Optional marketing and measurement tools

  • Google Analytics 4, Google Tag Manager, Meta Pixel, Microsoft Clarity, PostHog, or Plausible load only when their public environment keys are present.
  • These tools are intended for public marketing measurement, not child lesson behavior analytics.
  • Keep advertising, retargeting, or cross-context behavioral advertising disabled unless the site has the required consent, disclosures, and regional compliance setup.
  • Do not send child profile details, lesson answers, or account-sensitive data to third-party marketing tools.

Managing cookies

  • You can block or delete cookies in your browser settings, but essential cookies are required for secure account features.
  • Logging out clears the active authentication cookies that KeenClimb controls.
  • Clearing browser cookies, local storage, and cache resets language, theme, consent, session flags, and offline lesson storage on that device.
  • If optional analytics or marketing cookies are enabled, they should be managed through the site consent controls where required.