Cookie Policy
Every cookie, storage item and script YourWorksheets uses, what each one is for, how long it lasts, and how to say yes or no.
Version 1.0 · In force from 13 October 2026 · Last updated 13 October 2026
What cookies and similar technologies are
A cookie is a small text file a website stores in your browser. Websites can also keep information in your browser’s local storage, session storage or IndexedDB, or load a script that sends measurements back. The law treats all of these the same way, and so does this policy.
Strictly necessary — always on
These are needed for something you asked for: signing in, saving your work, protecting your account and our forms, or remembering a choice you made. They do not need your consent, and the site cannot work without them.
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
yw_consent | YourWorksheets | Cookie · first party | Remembers your cookie choices so we can respect them. | 12 months |
yw_locale | YourWorksheets | Cookie · first party | Remembers the language you chose for the site. | 12 months |
firebaseLocalStorageDb, firebase:authUser:* | Google Firebase Authentication | IndexedDB · first party | Keeps you signed in. Without “Keep me signed in”, the session ends when you close the browser; with it, it lasts until you sign out. | Until the browser closes, or until you sign out if you ticked “Keep me signed in” |
yw.keepSignedIn | YourWorksheets | Session storage · first party | Remembers, for this tab only, whether you ticked “Keep me signed in” while a Google sign-in completes. | Until the tab is closed |
yw.termsNotice.dismissed | YourWorksheets | Session storage · first party | Remembers, for this tab only, that you chose “Later” on the updated-terms notice. | Until the tab is closed |
firebase-heartbeat-database | Google Firebase | IndexedDB · first party | Part of the Firebase software that runs sign-in and the database; records which Firebase components are in use. | Until you clear site data |
reCAPTCHA (Firebase App Check) | Google LLC | Script · third party | Checks that requests come from our real website, not from automated software, before sign-in, saving, AI generation and form submissions are accepted. Google may set the _GRECAPTCHA cookie and receives your IP address and browser details. | _GRECAPTCHA: up to 6 months; check tokens: up to 1 hour |
yw:last-activity | YourWorksheets | Local storage · first party | Signs you out after a period without activity, including across tabs. | Until you sign out |
wsqueue:* | YourWorksheets | Local storage · first party | Keeps the list of worksheets you asked the AI to write, so a reload neither loses nor repeats them. | Up to 24 hours per job |
wsdraft:v1:* | YourWorksheets | Local storage · first party | Keeps an unsaved copy of the worksheet you are editing, so a crash or a closed tab does not lose your work. | Until the worksheet is saved or discarded |
yw.designer.palmRejection | YourWorksheets | Local storage · first party | Remembers your stylus setting (palm rejection) on this device. | Until you change it |
worksheet-sound | YourWorksheets | Local storage · first party | Remembers whether sounds are on in interactive worksheets. | Until you change it |
ink2:* | YourWorksheets | Local storage · first party | Keeps a student's handwriting on a sheet on this device until the work is handed in. | Until the work is handed in or cleared |
About the bot check (reCAPTCHA): before we accept a sign-in, a save, an AI request or a form, Firebase App Check asks Google’s reCAPTCHA to confirm the request comes from our real website and not from automated software. We use it only to protect the service and your account from abuse, which is why we treat it as strictly necessary. Google’s Privacy Policy and Terms of Service apply to it.
Analytics — only with your consent
These help us see how YourWorksheets is used and how fast pages load. They are off until you turn them on, and nothing is sent while they are off.
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
_ga, _ga_* | Google LLC (Google Analytics for Firebase) | Cookie · first party | Counts visits and how features are used (for example how many people finish signing up), so we can see what works. Google receives your IP address, a random identifier and device details. | Up to 2 years |
firebase-installations-database | Google LLC (Google Analytics for Firebase) | IndexedDB · first party | Stores the random identifier Google Analytics uses to tell visits apart. | Until you clear site data |
Vercel Speed Insights | Vercel Inc. | Script · first party | Measures how fast pages load so we can fix slow ones. Sends page timings with device and browser details; sets no cookie. | No storage; one measurement per page view |
Services contacted only when you use them
| Provider | When |
|---|---|
| Google LLC | Opens Google’s sign-in window when you choose “Continue with Google”. |
| Openverse (WordPress Foundation) and Wikimedia Commons | When you search for pictures in the designer, the results’ thumbnails load from these image libraries, which then see your IP address. |
| Polar Software, Inc. | When you upgrade, you are sent to Polar’s checkout page, which sets its own cookies under its own policy. |
How to give, change or withdraw consent
- When you first visit, a banner offers Reject all, Accept all and Manage choices — equally easy, and the site works whichever you choose.
- You can change your choice at any time: Cookie settings in the footer of every page, or in your account settings.
- Withdrawing consent stops analytics at once, deletes Google Analytics cookies from your browser and reloads the page.
- If your browser sends a Global Privacy Control signal, we treat it as “reject all optional” unless you turn something on yourself.
- We ask again after twelve months, or sooner if the optional tools change.
- You can also delete cookies and site data in your browser’s settings; you will then be asked again.
Children’s pages
On the student area and the kids’ privacy page there is no banner, because there is nothing optional to ask a child: only strictly necessary items are used there, and no analytics runs, whatever an adult chose on the same device. The bot check described above also protects student sign-in.
Legal basis
Analytics is used only with your explicit consent (KVKK article 5(1); for visitors in the EU and the UK, the ePrivacy rules and UK PECR). Strictly necessary items are exempt from consent because they are needed for a service you asked for; the bot check relies on our legitimate interest in keeping the service secure.
Changes and contact
This policy is generated from our cookie registry, so it changes when the registry does; earlier versions stay in the version history. Questions: privacy@yourworksheets.com. How we handle personal data in general: Privacy Notice and, for Türkiye, the KVKK notice for visitors.