CramAI uses strictly necessary browser storage to keep the service secure and remember your choices. Functional and analytics technologies stay off until you choose to allow them.
Cookie categories
Strictly necessary
Required for authentication, security, guest sessions, language selection and remembering your cookie choice. These cannot be switched off in CramAI because the requested service would not work reliably without them.
Functional
Enables the optional Google One Tap prompt. Turning this off does not remove the Google or Apple sign-in buttons you explicitly choose to use.
Analytics
Allows GA4 and the consented GTM container (which may load Plausible) to measure service usage. We disable Google advertising signals and do not load these tools before analytics consent.
Current browser storage
| Name / provider | Purpose | Category | Typical duration |
|---|---|---|---|
| cramai_cookie_consent / CramAI | Stores your versioned cookie preference | Strictly necessary | 180 days |
| id_token, session_active / CramAI | Keeps you signed in and protects authenticated requests | Strictly necessary | Session or account-session lifetime |
| guest_id / CramAI | Maintains a limited guest session | Strictly necessary | Limited guest-session lifetime |
| auth_id_token, refresh_token (local storage) / CramAI | Keeps you signed in | Strictly necessary | Until you sign out or the session ends |
| cramai-device-id, guest_claim_pending / CramAI | Applies guest usage limits and links a guest session to the account you create | Strictly necessary | cramai-device-id: until cleared; guest_claim_pending: up to 10 minutes, or until the guest session is linked |
| Referral code (local or session storage) / CramAI | Credits the referral link you used | Strictly necessary | Until you sign up or sign in, or until cleared |
| Language and application preferences / CramAI | Remembers settings you request | Strictly necessary | Until changed or cleared |
| Google One Tap / Google | Shows an optional sign-in prompt without you pressing a provider button | Functional | Controlled by Google and your browser |
| Google or Apple hosted OAuth | Completes sign-in only after you explicitly choose that provider | Strictly necessary | Controlled by the provider and your browser |
| _ga, _ga_* / Google Analytics | Distinguishes visits for usage measurement and, when you are signed in, links them to your account ID | Analytics | Up to 2 years |
| cramai.registration-analytics.*, plausible_ignore (local or session storage) / CramAI | Sign-up funnel measurement and exclusion of internal traffic | Analytics | Until cleared |
| Plausible via GTM | Aggregate product usage measurement; Plausible is configured without its own cookies | Analytics | Loaded only while analytics is allowed |
Your controls
Use Cookie settings at any time to reject optional categories or withdraw consent. Withdrawing analytics consent immediately stops analytics events sent from your browser and removes accessible GA cookies; it does not reload the page or interrupt your work. You can also delete site data in your browser.
If all cookies are blocked in your browser
CramAI cannot change browser-level cookie settings. Authentication may fail when first-party cookies are blocked. In Microsoft Edge, open Settings → Privacy, search, and services → Cookies, then enable “Allow sites to save and read cookie data.” You may instead add an exception for CramAI if your browser supports site-specific rules.
Third parties and changes
Separately from cookies, our servers send a few business events (sign-up, first study session, a return visit 7 days after sign-up, checkout started, and payment succeeded, including amount, currency and plan) to Google Analytics with your account ID and a Google Analytics identifier, and to Plausible without your account ID; these do not depend on your cookie choice, and the Privacy Policy explains what each service receives. Google services process data under their own terms and privacy controls. We will request consent again when a material change requires a new choice. This page describes the current production configuration; contact support@cramai.net with privacy questions.