Cookie Policy

Last Updated: October 22, 2026 Effective Date: June 5, 2026

1. Introduction

This Cookie Policy explains how MathbookLM (“MathbookLM,” “we,” “our,” or “us”) uses cookies, local storage, IndexedDB, pixels, SDKs, and similar technologies when you use our website, web application, and related services (collectively, the “Service”).

This Cookie Policy should be read together with our Privacy Policy and Terms of Service.

2. What Are Cookies?

Cookies are small text files stored on your device by a website or application. They help websites remember information about your visit, such as login status, preferences, security settings, and analytics choices.

Cookies may be:

  • Session cookies: deleted when you close your browser.
  • Persistent cookies: remain until they expire or are deleted.
  • First-party cookies: set by MathbookLM.
  • Third-party cookies: set by external providers such as Google, Firebase, Cloudflare, Lemon Squeezy, or analytics providers.

3. Similar Technologies

We may also use technologies that are not cookies but perform similar functions, including:

  • Local storage: browser-based storage for preferences and state.
  • IndexedDB: browser database used for local canvas and app data.
  • Session storage: temporary browser storage.
  • SDKs: third-party software libraries used for authentication, analytics, payments, or AI.
  • Pixels or tags: small tracking technologies used for analytics where enabled.
  • Server logs: request logs used for security and debugging.

4. Categories of Technologies We Use

4.1 Essential Cookies and Storage

Essential cookies and storage are required for the Service to function. They cannot be disabled through MathbookLM settings.

They are used for:

  • login and authentication;
  • account security;
  • CSRF protection;
  • session management;
  • payment checkout;
  • fraud prevention;
  • rate limiting;
  • remembering privacy choices;
  • basic app functionality.

Examples may include:

| Name / Type | Purpose | Duration | Provider | | ------------------------------ | ------------------------------------------- | ----------------------: | ----------------- | | session_id | Maintains login/session state | Session or until logout | MathbookLM | | csrf_token | Protects against cross-site request forgery | Session | MathbookLM | | Firebase auth tokens | Authenticates signed-in users | Short-lived / refreshed | Firebase / Google | | Cookie consent record | Stores cookie choices | Up to 12 months | MathbookLM | | Lemon Squeezy checkout session | Maintains payment checkout session | Session | Lemon Squeezy | | Cloudflare security cookies | Bot mitigation, DDoS protection, security | Variable | Cloudflare |

Disabling essential cookies may break login, checkout, security, canvas sync, or other core features.

4.2 Analytics Cookies

Analytics cookies help us understand how users interact with the Service.

Analytics may be used to:

  • measure feature usage;
  • detect drop-off points;
  • improve onboarding;
  • monitor performance;
  • diagnose errors;
  • test product improvements;
  • understand aggregate usage trends.

Analytics cookies are optional where consent is required.

Examples may include:

| Cookie Name | Purpose | Duration | Provider | | ------------------------------ | ---------------------------------------------------- | -------------: | ----------------- | | _ga | Distinguishes users and sessions | Up to 2 years | Google Analytics | | _ga_* | Maintains session state for GA4 properties | Up to 2 years | Google Analytics | | _gid | Distinguishes users for short-term analytics if used | Up to 24 hours | Google Analytics | | Firebase Analytics identifiers | App analytics and usage events | Variable | Firebase / Google | | ph_<project>_posthog | Distinguishes users and sessions for product analytics | Up to 1 year | PostHog |

In the EU, EEA, UK, Israel, and other consent-based jurisdictions, analytics cookies are set only after consent.

We use PostHog (EU cloud) for product analytics. Until you accept analytics cookies, and if you reject them, PostHog runs in cookieless mode: no cookies or browser storage are used, and visits are counted anonymously using a privacy-preserving identifier generated on PostHog's servers that cannot be used to recognize you across days. Your banner choice itself is stored in local storage so we can respect it.

4.3 Preference Storage

We may store preferences to improve your experience, including:

  • theme;
  • interface settings;
  • editor configuration;
  • canvas settings;
  • privacy choices;
  • language or region;
  • feature flags.

Preference storage may use cookies, local storage, or IndexedDB.

4.4 Security Cookies

Security cookies and related signals help us:

  • detect bots;
  • block abuse;
  • prevent unauthorized access;
  • protect accounts;
  • prevent fraud;
  • manage rate limits;
  • investigate security events.

Security cookies are treated as essential.

4.5 Payment Cookies

When you purchase a subscription, Lemon Squeezy or another payment processor may set cookies during checkout.

These cookies are used to:

  • maintain checkout state;
  • process payments;
  • calculate taxes;
  • prevent fraud;
  • issue receipts and invoices;
  • manage subscriptions.

Payment cookies may be set on the payment processor’s domain and are governed by that provider’s policies.

4.6 AI and Service Provider Technologies

AI providers such as Google Gemini generally process API requests and do not set persistent cookies through MathbookLM for normal API calls. However, Google or Firebase may set cookies when you authenticate with Google or interact with Google-managed services.

5. IndexedDB and Local Browser Storage

MathbookLM uses browser storage, including IndexedDB, for local app functionality.

IndexedDB may store:

  • canvas data;
  • drawing state;
  • unsynced changes;
  • local drafts;
  • cached chat history;
  • user preferences;
  • theme and interface settings;
  • offline or local-only data.

IndexedDB is not a cookie, but it can store information on your device in a similar way.

Some IndexedDB data may never be sent to our servers unless you sign in, enable sync, or use features that require upload. Other data may sync to Supabase or other backend systems depending on your account and settings.

You can clear IndexedDB through your browser’s developer tools or by clearing site data.

6. Third-Party Cookies and Providers

The following providers may set or use cookies or similar technologies:

| Provider | Purpose | Cookie / Storage Type | | ----------------- | ------------------------------------------------- | --------------------------------------------------- | | Firebase / Google | Authentication, OAuth, analytics if enabled | Essential and optional analytics | | Google Analytics | Usage analytics if enabled | Optional analytics | | PostHog (EU) | Product analytics | Optional analytics; cookieless without consent | | Cloudflare | Security, bot protection, DDoS mitigation | Essential security | | Lemon Squeezy | Checkout, payment, taxes, subscription management | Essential payment | | Supabase | Backend storage and account data | Usually no direct browser cookies unless configured | | Hosting providers | App delivery, logs, security | Essential technical data |

We do not control third-party cookies set on third-party domains. Review each provider’s privacy and cookie policies for details.

7. Consent Rules by Region

7.1 EU, EEA, UK, and Israel

For users in consent-based jurisdictions:

  • Essential cookies are active by default.
  • Analytics cookies require consent before activation.
  • You may reject non-essential cookies.
  • You may withdraw consent at any time.
  • Cookie choices are stored for future visits.

7.2 United States

For US users:

  • Essential cookies are active by default.
  • Analytics may be used subject to applicable law and available opt-outs.
  • California residents may have rights to opt out of “sale” or “sharing” of personal information if applicable.
  • MathbookLM does not sell personal information for money.

7.3 Other Regions

Where local law requires consent or additional controls, we will provide them where applicable.

8. How to Manage Cookies

8.1 MathbookLM Settings

You can manage available privacy controls in:

Settings → Privacy

Depending on your region and account status, you may be able to:

  • accept analytics cookies;
  • reject analytics cookies;
  • withdraw analytics consent;
  • export account data;
  • delete account data;
  • manage privacy preferences.

8.2 Browser Controls

Most browsers allow you to:

  • view cookies;
  • delete cookies;
  • block cookies;
  • clear site data;
  • clear local storage;
  • clear IndexedDB;
  • block third-party cookies.

Browser paths vary, but cookie and site-data controls are usually under privacy or security settings.

8.3 Clearing IndexedDB

To clear IndexedDB manually in many Chromium-based browsers:

  1. Open Developer Tools.
  2. Go to Application.
  3. Open IndexedDB.
  4. Select MathbookLM storage.
  5. Delete the database or clear site data.

Clearing IndexedDB may delete local canvases, drafts, unsynced changes, preferences, and cached data.

8.4 Google Analytics Opt-Out

You may use Google’s analytics opt-out tools or browser settings where available.

8.5 Global Privacy Control

Where required by law and technically feasible, we honor Global Privacy Control signals as an opt-out request for sale/sharing or targeted advertising.

9. Do Not Track

Some browsers send a “Do Not Track” signal.

MathbookLM does not use DNT as the primary cookie-control mechanism because there is no single universal technical standard. However:

  • essential cookies may still be used;
  • analytics will not be set where you have rejected analytics cookies;
  • Global Privacy Control may be honored where legally required.

10. Cookie Banner

Where required, MathbookLM displays a cookie banner or privacy control.

Example first-visit banner:

“MathbookLM uses essential cookies for login, security, and core features. We use analytics cookies only with your consent to improve the product.”

Options may include:

  • Accept all.
  • Reject non-essential.
  • Customize.
  • Save choices.

11. Consequences of Disabling Cookies

If you disable essential cookies or required browser storage, some features may not work, including:

  • login;
  • account authentication;
  • cloud sync;
  • checkout;
  • subscription management;
  • CSRF protection;
  • saved preferences;
  • local canvas persistence;
  • rate-limit integrity;
  • security protection.

If you disable analytics cookies, the Service should remain usable, but we will receive less usage information for product improvement.

12. Updates to This Cookie Policy

We may update this Cookie Policy to reflect changes in technology, law, providers, or Service functionality.

The “Last Updated” date shows when this Cookie Policy was last revised.

Material changes will be communicated where required by law.

13. Contact

Cookie and privacy questions: privacy@mathbooklm.com Security questions: security@mathbooklm.com Support: support@mathbooklm.com