Cookies and storage
One sign-in cookie, browser storage for your settings and work, and analytics ids only if you allow them.
Last updated
On this page
1. What this covers
Websites can keep small pieces of data on your device: cookies, local storage (kept until cleared), session storage (kept until you close the tab) and a cache for offline pages. Kolom uses one sign-in cookie and browser storage, and Google Analytics cookies only if you allow analytics. Everything else below is set by our own site; we do not use advertising cookies or social-media pixels.
2. Strictly necessary
These make the site work as you asked and are always on.
| Name | Type | What it does | How long |
|---|---|---|---|
sb-…-auth-token | Cookie (and local storage) | Keeps you signed in. Set by our sign-in provider (Supabase) for our site only | Until you log out; refreshed while you use the site |
bp.consent, bp.consent.v | Local storage | Remembers your analytics choice and which version of the question you answered, so we do not ask again | Until cleared |
bp.siteConfig.v1 | Session storage | Site settings (contact details, prices), so they load once per visit | Until the tab is closed |
bp.ann, bp.nudge.onboarding | Local / session storage | Layout of the announcement bar; whether the set-up reminder was shown in this tab | Until cleared / tab closed |
3. Your preferences and your work
These keep what you do on the site, on your device. Nothing here is sent to us unless you are signed in and the feature saves to your account.
| Name | What it does |
|---|---|
bp.learn.v1 | Progress, XP, streak, notes and bookmarks when you are not signed in (moved into your account when you sign in) |
bp.prefs.v1, bp.theme | Settings such as light or dark theme and the industry used in examples |
bp.podcast.v1, bp.player.compact | Where you are in a podcast episode and how the player looks |
bp.lab.v1.*, bp.sql.v2.*, bp.code.v2.*, bp.canvas.v1.*, bp.sim.versions.*, bp:practice:sd:* | Drafts and layouts in the labs, the SQL and code editors and the design studio |
bp.ex.*, bp.exam.*, bp.capstone.* | Exercise code and unsent exam or capstone drafts, so a reload does not lose your work |
bp.fc.skip.*, bp.fb.* | Flashcards you skipped; that you already sent feedback on a lesson |
bp.start.v2, bp.place.*, bp.roadmap.v1, bp.rank.*, bp.freeMonth.* | Your starting-point and placement answers, your roadmap, your last seen rank and whether you have seen the free-month notice |
bp.snap.*, bp.outbox.* | Signed in: a copy of your progress so pages load quickly, and saves waiting to be sent when you were offline |
bp.offline.*, the offline cache | Lessons and pages you saved for offline reading |
bp.geo | Your country as looked up for this tab, for analytics |
bp.product.v1.*, bp.finance.v1.*, bp.data.v2.*, bp.ai.v1.*, bp.export.*, bp.kbd | Drafts and layouts in the Product, Finance, Data and AI labs, how many downloads you made this month, and keyboard shortcut hints |
bp.review.dismissed, bp.review.quietUntil | That you chose “Not now” on a review prompt, so it does not keep asking |
webllm/model, webllm/config, webllm/wasm (cache) | Only if you download the AI Lab’s optional model: its files (a few hundred megabytes), so it loads from your device next time. Remove them with “Delete the model” in the lab |
Under EU and UK rules this storage is allowed without a consent banner because it is needed for features you choose to use.
4. Analytics (only if you click Allow)
| Name | Type | What it does | How long |
|---|---|---|---|
bp.anon | Local storage | A random browser id, so repeat visits are counted once | Until you say no or clear it |
bp.touch | Local storage | Your first visit: the landing page, referring site and campaign tags | Until you say no or clear it |
bp.sid | Session storage | A visit id, new after 30 minutes without activity | Until the tab is closed |
bp.evbudget | Session storage | How many click and page events this tab sent in the last hour (we stop at 300) | Until the tab is closed |
_ga | Cookie (Google Analytics) | A random id Google Analytics uses to tell browsers apart | 13 months, or until you say no |
_ga_WWBX18PBQF | Cookie (Google Analytics) | Keeps the state of your current visit for Google Analytics | 13 months, or until you say no |
With your yes we also record which buttons and links you click (by a fixed name, never what you type), the pages of a visit and how far you scroll. Google Analytics is loaded only after your yes, with advertising features off; saying no switches it off and deletes its cookies. Vercel Web Analytics and Speed Insights count visits and page speed without cookies or stored ids, and are off if you say no.
Until you choose, and if you say no, none of these are set, and we count page views without any identifier (see the privacy policy). A Global Privacy Control signal from your browser counts as no.
5. Other sites
If you choose Sign in with Google, Google’s own pages set Google’s cookies under Google’s policy. Payments happen in your bKash app, not on our site. When you open the Python or React labs, your browser loads their runtimes from jsDelivr, which sets no cookies for us; the AI Lab’s optional model files come from Hugging Face, only if you choose to download them. Links to other websites are covered by those sites’ own policies.
6. How to control it
- Change your analytics choice above, on the privacy policy or in Settings.
- Settings has a button to delete everything this site stored in your browser.
- Your browser can block or delete cookies and site data. If you block the sign-in cookie you cannot stay signed in; if you clear storage without an account, your local progress is lost.
Questions about this page: privacy@kolom.io. Kolom is run by [OPERATOR LEGAL NAME].