This Cookie Policy explains how Homeducate uses cookies and similar tracking technologies when you visit our website and use our Service.
Privacy-First Approach
We believe in minimal tracking. We use essential cookies for authentication, plus optional analytics cookies (Microsoft Clarity) that are only set if you say yes to our consent banner. No advertising, no social media tracking, and typed text and student details are masked in analytics.
1. What Are Cookies?
Cookies are small text files that are placed on your device when you visit a website. They help websites work efficiently and provide information to website owners.
2. Cookies We Use
Homeducate uses minimal cookies focused on essential functionality.
Authentication Cookie
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
authToken |
Keeps you logged in | Session | First-party |
Data Stored: Encrypted authentication token (32-byte hex string) - No personal information stored in the cookie itself
Why It's Necessary:
- Without this cookie, you would have to log in again for every page
- It verifies your identity with each request
- It's essential for security and Service functionality
Optional Analytics Cookies (only with your consent)
We use Microsoft Clarity to understand how the app is used — heatmaps, session replays, and where people get stuck — so we can improve Homeducate. Clarity only runs after you click "Allow analytics" on our consent banner. If you decline (or ignore the banner), no analytics cookies are set.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
_clck |
Links your visits into one Clarity user ID | Up to 1 year | First-party (Microsoft Clarity) |
_clsk |
Groups page views into a single session recording | 1 day | First-party (Microsoft Clarity) |
Privacy safeguards:
- Everything you type is masked before it leaves your browser
- Areas showing student names and work (Students, Assignments, Work Log, Gallery) are masked
- Recordings are used only to improve the product — never for advertising
- Subject to Microsoft's privacy statement: privacy.microsoft.com
We also use Rybbit, a cookieless, privacy-friendly page-view counter. It sets no cookies and does not identify you, so it does not require consent.
3. Cookies We Do NOT Use
We are committed to minimizing tracking. We do NOT use:
No Advertising Cookies
- No ad networks
- No retargeting cookies
- No behavioral advertising
No Social Media Cookies
- No Facebook pixels
- No Twitter tracking
- No social sharing buttons that track you
No Cross-Site Tracking
- No tracking of you across other websites
- No fingerprinting
- No selling or sharing of behavioural data
4. localStorage vs Cookies
We primarily use localStorage rather than traditional cookies:
Why localStorage?
- More secure for authentication tokens
- Not automatically sent with every request
- Larger storage capacity
- Better for single-page applications
- Controlled by JavaScript only
localStorage Data:
- Authentication token
- User role (parent/student)
- Username
- Student name (if applicable)
5. Third-Party Services
While we don't use tracking cookies ourselves, some essential third-party services may use cookies:
Stripe (Payment Processing)
When you visit the billing page or Stripe Checkout:
- Stripe may set cookies for fraud prevention
- These cookies are essential for secure payments
- Subject to Stripe's Cookie Policy: stripe.com/cookies-policy
- Required for PCI compliance and fraud detection
Microsoft Clarity (Optional Analytics)
Only if you consent (see Section 2). Data is processed by Microsoft under their privacy statement. Clarity honours your choice: if you decline, it sets no cookies and records nothing.
6. Managing Cookies
Browser Settings
You can control cookies through your browser settings:
Google Chrome: Settings → Privacy and security → Cookies
Firefox: Settings → Privacy & Security
Safari: Preferences → Privacy
Microsoft Edge: Settings → Cookies and site permissions
Effect of Blocking Cookies
If you block essential cookies:
- You will not be able to log in
- The Service will not function
- Your authentication will fail
If you block third-party cookies:
- You can still use Homeducate normally
- Stripe checkout may be affected
- You may need to allow Stripe cookies for payments
7. Your Consent
Essential authentication cookies are exempt from consent under UK/EU law — they are required for the Service to work at all.
Cookie Banner
Analytics cookies are opt-in. The first time you visit, a small banner asks whether we can use Microsoft Clarity:
- Allow analytics — Clarity loads and the cookies in Section 2 are set
- No thanks — nothing is loaded and no analytics cookies are set
- We re-ask roughly every 8 months, as consent expires
Changing Your Mind
You can change your analytics choice at any time:
8. Comparison with Other Platforms
Unlike many platforms, Homeducate:
| Feature | Homeducate | Typical Platform |
|---|---|---|
| Analytics cookies | Only if you opt in | Yes, without asking |
| Advertising cookies | No | Yes |
| Social media tracking | No | Yes (Facebook, Twitter) |
| Third-party trackers | No | Yes (multiple) |
| User profiling | No | Yes |
| Cross-site tracking | No | Yes |
We believe in privacy by design.
9. GDPR and PECR Compliance
Under UK GDPR and PECR (Privacy and Electronic Communications Regulations):
- Strictly necessary cookies (our authentication cookie) do not require consent
- Analytics cookies (Microsoft Clarity) require consent — we only set them after you opt in via the banner
- You can withdraw consent at any time using the button in Section 7
10. Contact Us
If you have questions about our use of cookies:
Email: privacy@homeducate.com
Website: homeducate.online/cookies
Summary (Plain English)
What cookies do we use? An authentication token to keep you logged in, plus optional Microsoft Clarity analytics cookies — but only if you click "Allow analytics"
What don't we use? No Google Analytics, no advertising cookies, no social media tracking, no hidden trackers
Can you control them? Yes — the analytics banner (and the button in Section 7) controls Clarity, and browser settings control the rest. Blocking the auth token means you can't log in
Bottom line: Minimal cookies, analytics only with your permission, student details masked, privacy-first approach
By using Homeducate, you accept our use of essential authentication cookies as described in this policy.