Cookie Policy

Last updated: May 6, 2026

⚠️ LEGAL REVIEW REQUIRED: This policy is a starting framework. Before going to scale or accepting paid users, [LEGAL_ENTITY_NAME] should have these documents reviewed by a qualified attorney licensed in [BUSINESS_STATE].

What Are Cookies?

Cookies are small text files stored on your device (computer, phone, tablet) when you visit a website. They are used to remember information about your visits, like login status, preferences, and settings.

BrainCandy uses cookies only for functional and security purposes. We do NOT use cookies for advertising, tracking, or profiling.

Cookies BrainCandy Uses

First-Party Cookies (Set by BrainCandy)

Cookie Name Purpose Duration Type
bc_token Authentication JWT token. Verifies you're logged in and maintains your session. 30 days HTTP-only Secure cookie
bc_session Session identifier. Tracks your current browsing session. Session (ends when browser closes) Secure cookie
bc_user User preferences. Stores theme (dark/light), volume settings, language, sidebar state. 1 year (persistent) localStorage (not HTTP cookie)
bc_streaks Streak cache. Stores current streak count locally for fast page load. Until cleared by user localStorage (not HTTP cookie)

What Are "localStorage" and "sessionStorage"?

These are not traditional cookies, but similar browser storage mechanisms. They store data locally on your device and are cleared per our retention policies above.

Third-Party Cookies & Trackers

✓ Good News: BrainCandy does NOT use any third-party cookies or tracking tools.

We do NOT use:

Exception: Stripe (payment processor) may set cookies for fraud prevention. See Privacy Policy for details on Stripe's data practices.

How to Manage Cookies

Disable Cookies in Your Browser

You can disable cookies in your browser settings:

Warning: Disabling cookies may break BrainCandy functionality (you won't stay logged in, preferences won't save).

Clear Cookies from Your Device

You can clear BrainCandy cookies at any time:

Clearing cookies will log you out and reset your preferences on next visit.

GDPR Consent (EU/UK Users)

If you are in the EU or UK, BrainCandy displays a cookie consent banner on first visit. We do NOT set any cookies requiring consent until you accept.

Our Consent Approach

Withdraw Consent

If you initially consented to cookies, you can withdraw consent at any time in your account settings (Settings → Privacy → Cookie Preferences). You can toggle which non-essential cookies you allow.

Do Not Track (DNT)

BrainCandy respects the Do Not Track (DNT) browser signal.

How to enable DNT:

If you send a DNT signal, BrainCandy will:

California Consumer Privacy Act (CCPA)

California residents have the right to know what cookies we use and opt out of certain practices. See our Privacy Policy for California-specific rights (Right to Know, Right to Delete, Right to Opt-Out).

Changes to This Cookie Policy

We may update this policy. Material changes will be announced 30 days in advance via a site notice or email.

Contact Us

Questions about cookies? Contact privacy@braincandy.im