SMART KIDS ZONE — COOKIES AND SIMILAR STORAGE
Version: 2026-10-20. Effective date: 20 October 2026.

The website uses cookies and browser storage to provide requested features,
keep sign-ins working and temporarily hold guest activity. Some cookies are
HttpOnly: the browser sends them to the server but page JavaScript cannot read them.
Storage rules apply to more than ordinary cookies, including session/local storage.

Cookies and storage used by Smart Kids Zone

skz-theme-preference (localStorage)
Purpose: remember the browser's explicitly selected Light or Dark appearance.
It contains only that appearance choice, not an account identifier. It remains
until changed, cleared in the browser or System is selected. System removes
the stored override and follows the device appearance. If storage is blocked,
the current page can still change appearance. This is a requested display
preference, not advertising tracking; it is independent of account deletion.

skz_parent_session (cookie)
Purpose: recognise the signed-in parent and restore a scoped session.
Default: browser-session cookie; server lifetime up to 24 hours, with a 12-hour
idle limit. Remember-me choice: persistent cookie up to 30 days, 7-day idle limit.
Signing out or a parent password reset revokes relevant sessions earlier.

skz_child_session (cookie)
Purpose: recognise the selected signed-in learner. Same browser-session/
remember-me durations as above. Parent-controlled learner password reset revokes
that learner's sessions. A child and parent use separate role permissions.

skz_google_flow (cookie)
Purpose: bind a Google sign-in/linking attempt to the initiating browser and
prevent a forged callback. Up to 10 minutes, normally removed when the flow ends.
It is not an advertising cookie and does not give access to Google email/files.

skz-child (sessionStorage)
Purpose: short-lived, scoped learner access data for the current browser tab.
Removed on relevant sign-out/role change; short-lived access tokens can expire
earlier than the browser session and be refreshed using the protected cookie.

skz-guest-work (sessionStorage)
Purpose: temporary references/results for handing a guest quiz to a parent's
save action. The associated server session expires after 2 hours. Closing or
clearing browser sessions normally removes this storage; browser restoration
behaviour varies, so guest work is not a guaranteed long-term record.

skz-recovery-session-requests (sessionStorage)
Purpose: show how many password-reset requests have been submitted in the current
browser-tab session, including unsuccessful checks. It contains only a number,
not an email address, password or reset link. It does not establish that an email
was sent and does not enforce sending limits; those are enforced by the server.
It normally lasts for the tab session; browser session restoration may retain it.
If storage is blocked, the counter works for the current page only.

skz-admin-token (administrator sessionStorage)
Purpose: scoped read-only administration access in the administrator's tab, not a normal
learner function. Server-side expiry/maximum authentication ages also apply.

Parent access tokens are kept in page memory; they are not saved in localStorage
by the current parent API helper. Our active learning/sign-in implementation
does not add advertising cookies or an analytics tracker. Hosting and payment
providers may use separate storage as explained below.

Google, payments and fonts
When you choose Google sign-in you visit Google, which applies its own sign-in
storage/privacy information. Hosted Stripe checkout/management pages and a
selected payment-method provider, including Google Pay or Apple Pay where
offered, may use their own storage for payments and
fraud prevention. Their own privacy and storage information applies to those services.
The current stylesheet loads Google Fonts; the browser sends ordinary connection
information to that provider. The official Google button logo in the latest
update is served locally. DB-IP estimates use a locally stored database and do
not make a per-visitor lookup request to DB-IP.

Choices and the consent approach
The essential-session/security items support features you request. A persistent
remember-me choice is optional; use it only on a private device. If non-essential
tracking/storage is introduced, it must be assessed and, where required, blocked
until valid consent; do not assume all storage is exempt just because it is useful.
Blocking cookies/storage can prevent login or saving guest work. You can sign
out, clear site data in your browser, and stop choosing remember-me. This does
not by itself delete learning or payment records stored on the server.

Questions: use Contact Us or admin@smartkidszone.com.
Smart Kids Zone is operated under ZaQuest Ventures.

Guest usage summaries
Guest quiz counts and approximate country totals are calculated on the server.
This feature adds no analytics cookie, fingerprint or browser visitor identifier.
The existing temporary guest-work reference may be sent when creating a family
account to measure a verified guest-to-family conversion. Unlinked registration
is not inferred from an IP address or browser fingerprint.

PHONE PREVIEWS AND LEGAL DOCUMENT WINDOWS
The current Android and iPhone previews use their own web-view cookie storage for the same sign-in service. Signing in in Safari or Chrome does not necessarily sign the app in. External checkout and sign-in can open the system browser. The current previews do not add an advertising identifier or a new analytics SDK.

Legal pages may open in a temporary window over a form. Reading or closing it does not accept terms or submit the form. The overlay holds no new tracking identifier and keeps no separate copy of form fields. The existing page remains open while the document is fetched. Platform counts use the current request's reported app/browser information, not an additional analytics cookie. The privacy policy describes retention.