authjs.session-token (or __Secure- prefix)
Essential- Provider
- Acadify / Auth.js
- Storage
- First-party, HttpOnly cookie
- Purpose
- Maintains an authenticated, role-authorized session.
- Retention
- 6 days normally; up to 30 days when Remember me is selected.
Legal
Cookie Policy
Last updated: October 2026
What this policy covers
Cookies are small values saved by a website in your browser. This policy also covers similar browser storage and optional third-party scripts used on Acadify. It reflects the technologies currently present in the application; Acadify does not use advertising or student-profiling trackers.
Your choices
Essential storage remains active because it is needed for security, sign-in, or a setting you explicitly requested. Functional and analytics technologies remain off until you allow them. Accepting or rejecting optional technologies does not change account permissions or prevent Student, Teacher, Admin, or Super Admin workflows.
Cookie and storage inventory
Secure prefixes may vary between HTTPS production and local development.
authjs.csrf-token and authjs.callback-url (secure prefixes on HTTPS)
Essential- Provider
- Acadify / Auth.js
- Storage
- First-party, HttpOnly cookies
- Purpose
- Protects authentication requests and returns users to the intended page.
- Retention
- Browser session or the short authentication flow.
acadify_consent
Essential- Provider
- Acadify
- Storage
- First-party cookie and localStorage copy
- Purpose
- Remembers the privacy choices made in this browser; contains no account identifier.
- Retention
- 180 days, unless cleared or replaced by a new policy version.
theme, sidebar_state, acadify_digital_id_setup_*
Essential- Provider
- Acadify
- Storage
- First-party cookie or localStorage
- Purpose
- Remembers interface choices the user explicitly makes, such as theme, sidebar state, or dismissing Digital ID setup.
- Retention
- Sidebar: 7 days. Other settings: until changed or browser data is cleared.
Cal.com embed storage
Functional — optional- Provider
- Cal.com
- Storage
- Third-party script, iframe, cookies or browser storage
- Purpose
- Displays the embedded scheduler for booking an Acadify demonstration.
- Retention
- Controlled by Cal.com and described in its privacy documentation.
ph_* and __ph_opt_in_out_*
Analytics — optional- Provider
- PostHog
- Storage
- First-party cookie/localStorage plus requests to the configured PostHog host
- Purpose
- Measures public-site page use. Authenticated dashboards, automatic element capture, and session recording are excluded.
- Retention
- Analytics identifiers: up to 180 days and cleared on withdrawal where accessible. An opt-out marker may remain to enforce withdrawal.
Vercel Web Analytics events
Analytics — optional- Provider
- Vercel
- Storage
- Analytics network requests; no Acadify analytics cookie
- Purpose
- Provides limited public-site page-usage measurement on deployed environments; authenticated dashboard events are blocked.
- Retention
- Server-side retention depends on the Acadify Vercel plan and must be confirmed by the service owner.
What happens when you withdraw
Acadify stops future optional analytics, asks PostHog to opt out and resets its identifier, blocks Vercel analytics events, removes accessible PostHog identifiers, and removes Cal.com frames. A website cannot directly delete HttpOnly or third-party cookies owned by another domain; those can be managed through that provider or browser controls. Withdrawal does not reverse processing already completed.
Children and school accounts
Acadify is used in educational settings and may serve children. Optional advertising and behavioural profiling are not enabled. This preference tool does not replace any parental consent, school authorization, age-assurance process, or student privacy notice required by the law and contract applicable to a deployment.
Provider information
Contact
Questions or privacy requests can be sent to acadify.tech@gmail.com. Acadify's legal entity name, registered address, privacy contact role, and final provider retention settings require organizational confirmation before publication in jurisdictions that require those particulars.