Cookies and local storage

What is stored in your browser

• A cookie, only while you connect Canvas (wl_canvas): a random one-time code, set when you start connecting your school's Canvas and removed as soon as you are back (or after 10 minutes). It is HttpOnly and only sent to our own Canvas sign-in address, and it proves that the sign-in you finish is the one you started, so a link someone else started cannot attach their Canvas to your account.
• Your study data (key names start with tb:): your profile and setup (tb:profile), your course list and each course's text, concept map, progress, whiteboards, saved lessons, lessons you started and haven't finished (so you can continue them on any device; removed when graded, when you start over, or after 14 days), flashcards, practice test scores, and the exams and weekly topics read from a syllabus you added (tb:courses and keys beginning tb:c:), a reference to each of a course's answer keys (only an ID and a count; the keys themselves stay on our server), your study calendar (tb:schedule), your MCAT-style practice results and which practice questions you have already seen (tb:mcat), what your tutor remembers beyond your grades (tb:memory: the explanations you marked That Helped, and a list of what you deleted from What Blip Remembers, so a deletion reaches your other devices too) and your appearance choice (tb:theme).
• Older versions of the app kept a copy of each grade rating you sent, with any note and, if you ticked the box, your explanation, and any plan you said you would pay for, on this browser (keys beginning tb:shared:). Nothing read them; the app now removes them when it opens.
• A study session in progress (wl:study:run): its plan, timer and results so far, and anything you wrote under "Anything specific, or any worries?", so a page refresh does not lose the session. It is removed when the session ends, or after 12 hours.
• Dates to check after bringing in Canvas (wl:canvas:checks): the course, the exam's name, the dates in question and the line of the syllabus or announcement they came from, shown on Today until you say which date is right. Your Canvas token and links are never stored.
• The school you picked when connecting Canvas (wl:canvas:school): its name and its Canvas address, so it is one tap away next time.
• That the app told you, once a billing period, about Pro Weekly's room for heavy study (keys beginning wl:roomcard:): your plan and the day it renews, nothing else, so the note is not shown twice in one period.
• That a Canvas sign-in was started during setup (wl:canvas:setup, for this tab only): so setup carries on when you come back from your school's sign-in page. It is removed as soon as you're back.
• A lesson in progress (wl:lesson, in this tab's session storage): what you and your tutor wrote so far, any labelled picture you asked to see in it (which picture, and its labels), which key ideas you have explained and how far its lecture got, so a page refresh opens the lesson where it was at once. It is removed when you close the tab or the lesson is graded, and ignored after 6 hours. The same lesson, without pictures, is also kept with your study data above, so you can continue it on another device.
• A Check you paused (wl:check:paused): how far it got (each question's level and key point number, how each answer was graded, and the feedback and questions you saw), so it picks up where you left off after a page refresh. Nothing in it is scored. It is removed when you pick the Check up again, or after 7 days.
• Your sign-in (wl:acct): your account email, account ID and the session tokens that keep you signed in on this browser.
• Usage measurement (key names start with wl:): a random ID for this browser (wl:cid) and a short queue of usage events waiting to be sent (wl:outbox, at most 500); where your first visit to the app came from (wl:arrival: a campaign's tags in the link, a share code, the click number a Meta or TikTok ad put on its link if you came from one, and the name of the site that sent you, never the page; the click number is not kept if your browser sends Global Privacy Control), until it is sent once with those events (wl:arrival-sent); and that you already answered, or skipped, the one question about why you cancelled (wl:why-left).
• Whiteboard preferences (wb:prefs): your pen, highlighter and shape colors and sizes, and your eraser and pen-only choices, and whether a shape snaps when you hold the pen still.
• Syncing with your account (wl:sync:at, wl:sync:q, wl:sync:pulled, wl:sync:owner, wl:sync:merge, wl:sync:forget, wl:sync:refused, wl:sync:refused:said, wl:sync:skew, wl:sync:aged, wl:sync:spare, and keys beginning wl:sync:lazy:): when each item last changed, the changes waiting to be sent to your account, which of them your account turned down for want of room (they stay on this browser and are sent again once there is room) and when you were last told so, how far this device's clock is from our server's (so a clock that is wrong never undoes newer work), whether our server has your age group yet (nothing is sent before it does), the courses and ideas whose answer keys our server still has to delete, which account this device last caught up with, whether what you did here before signing in still has to be merged into your account, and which parts of your courses (material pages, whiteboards, saved lessons, and on a very full browser some flashcards and other course records) were removed from this browser to make room or had no room here (your account keeps them, and they come back when you open that course), with a little room (about 64 KB of filler, wl:sync:spare) held while your account's data first arrives so these records always fit, removed when it is done, so your courses and progress follow you to another device without mixing two people's data. When this browser is full, two short notes are kept in this tab's session storage only: when the app last started again to show what arrived from your account (wl:reloads), so it never does so over and over, and that some of your courses are kept in your account for now (wl:sync:kept), so you are told once. Whiteboards are synced with the rest of a course; their sizes on this browser are kept in tb: keys ending wbsizes so a course's boards stay under 2 MB here.
• Another account's study data on a shared device (keys beginning tbh: and that account's ID): when someone signs out, or someone else signs in on this browser, the study data of the person who was signed in is set aside here, so it is not mixed with theirs. It is never uploaded, it comes back when that person signs in again, and it is cleared when that account is deleted.
• Calendar connect card (wl:calgate): whether you connected a calendar app or chose Skip for now, and when, so the card stays away for a week after a skip.
• Study milestones (wl:firstday, wl:secondday, wl:firstscore): the day you first studied, the first later day you came back, and when you first got a score, so these are counted once.
• A Pro checkout you started (wl:checkout): the plan and when, so returning from Stripe's page can count a trial or purchase once. Removed when you come back, and ignored after two hours.
• Setup and safety (wl:onboarding:v1, wl:blocked, wl:cfg): your place in setup if you stop part way, with the answers you gave so far, such as your name, school, state, age group and where you heard about us (your birth month and year are never stored), the time an age answer was under the age limit, which stops sign-up on this browser for 24 hours, and which features this site had switched on the last time it was reached (so the app can start with no connection).
• Only for our team: whether the test panel is shown on this browser (wl:demo), set by opening the site with ?demo=1.
• Only in the version of Sancy AI that runs inside Claude: a random secret for this device (wl:localsecret), used to check that a grade was not changed, and that version's answer keys, which it keeps on the device because it has no server.
• Pictures of your slides (IndexedDB database sancy-slide-pictures): when you add a PDF, or a PowerPoint slide that is one big picture, a small picture of each page is kept on this device only, so "Teach Me Slide by Slide" can show your real slide. They are never synced to your account or sent anywhere, and they are deleted with their file, their course or your account.
• A copy of the app's own files (its code, fonts and icons), kept by a service worker so the app opens quickly, even with no connection (Cache Storage; names start with shell-). If the on-device speech model is switched on, its files may be kept in Cache Storage too. Neither holds anything anyone wrote, said or did, or anything from your account. Add ?nosw to the address to switch the offline copy off, or clear this site's data to remove it.

What is not stored

No other cookies, no ad-network cookies or pixels, no device advertising IDs, no fingerprinting, no third-party storage. Counting visits to the front page uses no cookies or local storage, and is skipped when your browser sends Global Privacy Control or Do Not Track. Fonts are served from Sancy AI itself. The human check on our sign-in page (Cloudflare Turnstile) and the Google and Apple sign-in buttons load from those companies only when you use them, and they may set their own cookies or storage under their own policies. When you talk to the tutor, your voice goes from your browser straight to our speech-to-text service, and Sancy AI never records or keeps it; see the Privacy Policy.

How to clear it

• Delete your Sancy AI account in You, under Privacy and data. It deletes the account, then clears every key above, the pictures of your slides and the Cache Storage from the device you are using, with two exceptions. Another person's study data set aside on this device (tbh:) stays, because it is theirs; anything set aside for the deleted account goes. And wl:blocked, which holds only a time, stays until its 24 hours are up, so deleting an account never lifts the sign-up stop. The app's offline copy is downloaded again the next time you open Sancy AI.
• Or clear this site's data in your browser's settings. That signs you out and deletes the study data on this device, while what is synced to your account stays with it. Anything kept only on this device is gone for good, so sign in first if you want to keep it.

Changes

If we start using anything else that is stored on your device, we will list it here first, and ask you if the law says we need to.