Cookies

Section 1What cookies are

Cookies are small files a website keeps in your browser, so it remembers you between pages. Browser storage does the same job, but stays in your browser and isn’t sent to us with every page.

Every cookie below is needed for the site to work, so it doesn’t need consent. They are sent only over HTTPS, can’t be read by scripts on the page, and can’t be read by other websites.

Section 2On our website

• scoolin: keeps your sign-in or sign-up in progress. Lasts 14 days.
• trusted: skips the extra sign-in check on a device you chose to trust. Lasts 30 days.
• school: remembers which school you opened last, if you belong to more than one. Lasts a year if you ask us to remember it, otherwise until you close the browser.

In browser storage, not cookies:

• Text size on these policy pages (A− / A+).
• Our free tools (such as the TC maker): what you type is saved in your browser so it’s there next time. It never reaches us. Clear it from the tool, or with your browser’s site data.
• Visit counts (statsy_sid, statsy_last, statsy_mode): a random visit number from Statsy, our visit counter, so the pages of one visit count as one. It holds nothing about who you are, starts again after 30 minutes without a page, and is cleared when you close the tab.

Section 3Inside your school’s Scoolin

• session: keeps you signed in. If you tick “remember me” it lasts a year, or until it goes unused for 30 days; otherwise it ends when you close the browser, and in any case after 7 days. It is sent only over HTTPS and can’t be read by scripts.
• google_oauth_state: set only while you sign in with Google, to check the reply really came from Google. Lasts 10 minutes.

In browser storage: your layout choices (such as the sidebar, table columns and saved views), the gate scanner’s camera choice, print choices, and, on a computer used as the school bell, the bell schedule it rings.

Section 4Other services

• Cal.com shows the booking calendar on our demo page, and may set its own cookies when it loads. See Cal.com’s privacy policy.
• Google Fonts supplies the website’s fonts. Your browser contacts Google to fetch them, which shows Google your IP address; it sets no cookies.
• Cloudflare Turnstile checks that a person, not a bot, is signing in, and may use its own cookies for that.
• Gravatar may show a user’s profile picture inside Scoolin; your browser fetches it from Gravatar.
• Statsy counts visits to our public website: the page, the page you came from, your screen size, language and time zone, and the country it works out from your IP address. It sets no cookies, isn’t on the Scoolin app or any school’s pages, and doesn’t count browsers that send Do Not Track or Global Privacy Control.

Section 5No ads, no tracking

We don’t use advertising cookies, or anything that follows you across other websites. The only visit counting is Statsy, above, on our public website, and it uses no cookies.

Section 6Turning them off

You can block or delete cookies and site data in your browser’s settings. Without the sign-in cookies, you can’t sign in to Scoolin, and the free tools won’t remember your work.

To stop Statsy counting your visits, turn on Do Not Track or Global Privacy Control in your browser.