⚠️ Draft for review — not legal advice.
This is a working draft. It must be reviewed and approved by a qualified data-protection / education-law professional and the responsible Data Protection Officer before it is published or relied upon. Placeholders in [square brackets] need real values.
Cookie Policy
Last updated: Draft — not yet published
Storyjar uses the smallest possible number of cookies. We do not use any analytics, advertising or tracking cookies.
What we use
Storyjar sets one strictly necessary cookie:
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
portfolio_session | Keeps a signed-in teacher, student or parent logged in for the duration of their session. It is httpOnly and SameSite=Lax. | Strictly necessary | Up to 30 days |
What we do not use
We use no analytics, advertising, social-media or behavioural-tracking cookies, and no third-party trackers. Children are never profiled. Because we only use a strictly necessary cookie, we do not need a cookie consent banner under PECR — but you can still clear the cookie by signing out or clearing your browser data.
Changes
If we ever introduced a non-essential cookie, we would ask for consent first and update this page. [Confirm with the DPO before adding any new cookie or third-party script.]