Cookie Policy
This document is not final.
What follows is scaffolding, not reviewed legal text, and nothing on this page should be relied on. It must be replaced before Library & Co. accepts a real student.
We do not show a cookie banner, and this is why
Library & Co. sets three cookies: two that keep you signed in, and one that gives this browser a name so your devices can be told apart. All three are strictly necessary — the third is what lets a student account be used on one device at a time, and what lets you block a device you do not recognise. There is no analytics cookie, no advertising cookie and no third-party tracking cookie, so there is nothing here for you to accept or reject, and a banner asking you to choose would be offering a choice that does not exist.
One other thing is stored on your device, and it is not a cookie: if you use the light/dark switch in the header, your choice is saved in your browser under ib-theme. It is written only when you press that switch, it never leaves your browser, and clearing your site data removes it. Nothing else is kept in localStorage or sessionStorage. Our fonts are served from our own servers, so loading a page does not tell a font provider that you visited.
The cookies we set
| Name | Purpose | Lasts |
|---|---|---|
sb-…-auth-token | Keeps you signed in. Split across numbered cookies when it is too large for one. | 400 days |
sb-…-auth-token-code-verifier | Used only while you are signing in or confirming your email, to complete the exchange securely. | 400 days |
ib_device | Gives this browser a name — a random id, not your name and not linked to anything you do elsewhere. A student account can be signed in on one device at a time, and this is how the other one is recognised, and how you can block a device you do not recognise. Clearing it makes this browser look like a new device. | 730 days |
All three are first-party — set by this site, not by anyone else — and all three are strictly necessary. We set no functional, analytics or marketing cookies.
The sign-in cookie lasts 400 days. We are telling you the real number rather than implying it disappears when you close the browser. If you are on a shared or school computer, sign out when you finish — that removes it.
Other companies your browser contacts
Some things on the page load straight from another company's servers, which means your browser tells them your IP address and which file you asked for. They do not set cookies that we control:
- Bunny — course video and its thumbnails.
- Supabase — course cover images and teacher photographs, and the database and sign-in service behind the site.
This happens on public pages too, so it applies even before you have an account. Who these companies are and what they do with data is covered in the Privacy Policy.
Removing them
Signing out removes the sign-in cookie. You can also clear cookies for this site in your browser's settings at any time. Doing so signs you out — nothing else breaks, and no course, purchase or progress is lost. Clearing them also discards this browser's device name, so it will look like a new device the next time you sign in, and any block you had placed on it stops applying to it.
To be written: The formal cookie-consent position for each country we end up serving, once a lawyer has confirmed which data-protection regimes apply to a Jordan-based platform with a worldwide student base. The description above is accurate about what the software does; what it does not yet carry is a legal assessment of it.