Cookie Policy

XYIEO is an online education platform operated by ARVIND KUMAR, an individual based in India (“XYIEO”, “we”, “us”, or “our”). This Cookie Policy explains how XYIEO and its operator use cookies and browser local storage on the platform.

Key Privacy Disclosure: XYIEO uses strictly necessary authentication and security session cookies, and optional aggregate performance analytics strictly upon explicit user opt-in. We do NOT use third-party advertising cookies, cross-site tracking identifiers, or behavioral profiling tools. Advertising-related consent is permanently denied.

1. Strictly Necessary & Functional Cookies

These cookies are technically essential to maintain secure user sessions, protect against cross-site request forgery (CSRF), and remember your privacy preferences. Authentication cookies are set upon login, while the consent preference cookie remembers your analytics choice:

Cookie Name	Provider	Purpose	Duration	Classification
next-auth.session-token	XYIEO (1st Party)	Maintains encrypted JWT student/admin authentication session	7 Days	Strictly Essential
next-auth.csrf-token	XYIEO (1st Party)	Cryptographic token preventing CSRF exploits on state-changing actions	Session	Strictly Essential
next-auth.callback-url	XYIEO (1st Party)	Preserves internal redirect URL during authentication flows	Session	Strictly Essential
xyieo_analytics_consent	XYIEO (1st Party)	Remembers your explicit choice to allow or decline optional aggregate analytics	1 Year	Functional Preference

2. Optional Aggregate Analytics Cookies (Opt-In Only)

If you explicitly select “Allow analytics”, XYIEO activates Google Analytics 4 (Google LLC) to measure aggregate website traffic, page load reliability, and student feature navigation. When consent is denied or not granted, GA4 is completely unloaded and zero analytics cookies are created:

Cookie Name	Provider	Purpose	Duration	Classification
_ga	Google LLC (GA4)	Distinguishes anonymous visitors for aggregated platform reliability metrics	2 Years	Optional Analytics (Opt-In)
_ga_*	Google LLC (GA4)	Maintains aggregated session state for diagnostic reporting	2 Years	Optional Analytics (Opt-In)

3. Manage Your Analytics Preferences

You can inspect, allow, or revoke your analytics consent at any time using the control below. Revoking consent immediately unloads analytics and removes active analytics cookies:

Loading analytics preferences...

4. Browser Local Storage

We use browser `localStorage` solely for functional UI state preferences:

xyieo_sidebar_collapsed: Remembers whether you collapsed the navigation sidebar for wider test reading.
xyieo_analytics_consent: Local storage mirror of your analytics consent preference.

5. Zero Commercial Advertising & Behavioral Tracking

XYIEO does NOT deploy Meta Pixel, Microsoft Clarity, Hotjar, or commercial advertising networks. Advertising signals (ad_storage, ad_user_data, ad_personalization) remain permanently denied in our analytics integration. Student names, emails, test answers, and question text are never transmitted to analytics endpoints.

6. Contact Us & Statutory Inquiries