1. What we mean by "cookies"

When we say cookies, we mean both HTTP cookies and equivalent browser storage (`localStorage`). Most of your on-device state - exam-resume progress (when signed in), preferences, AI chat and predictor drafts - lives in `localStorage` under keys starting with sarv_, never leaves your device unless you sign in, and is covered by the same choices below.

2. What we store and why

• Essential (always on): Supabase login session and security tokens (session duration); sarv_cookie_preferences - your consent choice itself, kept 12 months; sarv_pending_verify_email - email-verification continuity, session only. Without these, sign-in and account security cannot work.
• Functional (your choice, on by default): sarv_active_exam_session - resumes your exam after a refresh (cleared on submit, max ~24h); sarv_take_identity and sarv_take_code - your name and teacher-exam access code; onboarding and tutorial flags (sarv_onboarded_v2 - keyed by an opaque account ID, never your email,sarv_tutorial_seen); UI preferences such as hints toggle, selected category and dashboard tab. Turning these off disables exam-resume and similar conveniences - we delete the related keys when you reject them.
• Analytics (your choice, off by default): only enabled if you opt in. Used for anonymous, aggregated statistics such as popular mock papers, exam-completion funnels and page-load performance. We run no advertising trackers.

3. Third parties

Supabase hosts authentication and our database (session cookies as above). Groq API processes AI features (hints, chat, predictions) - it receives the text you submit for inference only and sets no tracking cookies in your browser. We do not sell data or use cross-site advertising cookies.

4. Your choices and rights

On your first visit you can Accept All, Reject All (essential only), or open Configure to toggle Functional and Analytics separately. You can change your mind at any time via the Manage cookies link in the footer. Under India's DPDP Act 2023 you may also request access, correction or erasure of your data - signed-in users can export everything from Settings → Export My Data or delete their account from Settings → Delete My Account & All Data; anyone can wipe on-device data with Clear Data on This Device. Whenever this policy or our categories change, we bump the consent version and ask you again.