Account and security cookies
Better Auth sets sign-in cookies for your Nexary account. In production these use secure transport and HttpOnly protection. The main session can last up to 30 days and refresh while you use your account; a short session cache lasts up to five minutes. Sign-in or external-provider flows may also use temporary security cookies.
These cookies are needed for account authentication and security. Blocking them prevents sign-in from working. Cloudflare may also use security cookies or checks to protect the site; the exact cookies depend on the security challenge you receive.
Local and tab storage
Your browser stores a per-account copy of learning state so saved screens can load quickly, and preferences such as theme, reduced motion, course-outline position, read-aloud and whether you have seen the voice notice. These stay on that device until cleared or changed. The app removes its per-account learning cache when you sign out or delete that account.
The email-code countdown uses tab storage, which can contain the email address being verified and the last send time. It is not a marketing list and is removed when the tab’s storage is cleared.
Advertising and analytics
Nexary uses explicit PostHog product events to measure visits, verified signups, onboarding and learning progress. A random device identifier is stored locally for up to 90 days; an account-linked random identifier lets us measure return visits. No advertising pixels or general automatic click capture are installed. Selected learning and signup links produce a fixed action event, without their text or full URL. Query strings, names, emails, answers, notes and practice conversations are excluded.
Optional session replay is off by default. If you enable it below, the PostHog browser library records masked page layout, pointer movement and scrolling on signed-out landing and account-entry pages only. All text and input values are masked; forms, images, video and embedded content are blocked. Private learning pages, messages, signed-in accounts, console logs, network bodies and headers are not recorded. Recordings are retained for 30 days. The choice is stored in the nexary_replay_opt_in cookie for up to one year. You can withdraw it below. Nothing is recorded retrospectively.
You can turn product analytics off below. The choice is saved in the nexary_analytics_off cookie for one year on this browser. Do Not Track and Global Privacy Control also stop these events. Turning analytics off does not affect sign-in or saved learning work. Clearing browser storage clears this choice. Measurements can be incomplete when people opt out or block storage. Hosting and security providers may still keep operational logs.
Session replay is off on this browser.
Your controls
You can sign out, change preferences in Settings, or remove Nexary cookies and site data through your browser. Clearing device storage does not delete your server account or saved work; use Delete account in Settings for that.
On a shared device, sign out before leaving it. Browser settings can also revoke microphone permission. Email nexusystems@gmail.com if you need help understanding or clearing Nexary storage.