Cookie Policy
Cookies are small files a website stores in your browser. Summa uses as few as it can: no advertising cookies and no third-party trackers.
Cookies Summa sets
| Name | Type | What it does | Lasts |
|---|---|---|---|
| sb-…-auth-token | Essential | Keeps you signed in to your account. Set when you sign in and removed when you sign out. Scripts in the page can't read it. Long sessions may be split across several cookies with the same name and a number. | Until you sign out, and at most 30 days from when you signed in |
| sb-…-auth-token-code-verifier | Essential | A one-time value that makes sure a sign-in link is completed in the browser that asked for it. | Until you sign in |
| summa_next | Essential | Remembers which page to bring you back to after you open your sign-in link. | 1 hour |
| summa_guest | Essential | A random ID that lets you play a class round from a room link before signing in, and save it to your account afterwards. Scripts in the page can't read it. The guest round itself is deleted after a day if you don't save it. | 1 day |
| summa_pending_guest | Essential | Set when you sign in on a different browser from the one you played as a guest in, so Summa can ask whether to save that score. | 1 hour |
| summa_consent | Essential | Remembers your cookie choice, so we don't ask again. | 1 year |
| summa_admin | Essential | Keeps Summa's operator signed in to the private admin page. Visitors never get it. | 12 hours |
| summa_admin_device | Essential | Remembers the operator's own device, so the admin page can still be reached during a sign-in lockout. Visitors never get it. | 30 days |
| summa_uid | Essential | An old ID from before Summa had accounts. Summa no longer sets or reads it, and deletes it when you sign in or out, or delete your account. | Deleted when found |
Other storage on your device
Summa also keeps two settings in your browser's local storage, which never leave your device: whether sound and vibration are on during rounds, and whether you dismissed the notifications card. If you turn notifications on, your browser stores a notification subscription and installs a small script (a service worker) that only shows Summa's notifications.
Usage analytics
Analytics doesn't set a cookie of its own. If you choose “Accept all”, or turn analytics on in your cookie settings, Summa records usage events in its own database, linked to your account. These events are: room created, room joined, round started, first question shown, round finished, link opened, link copied or shared, rank shared, “play again”, challenge sent or accepted, signed in, returned on a later day, guest score saved, and question flagged. If you choose “Reject all”, or haven't chosen yet, none are recorded. They're never recorded for anyone who said they're 13 to 17. See the Privacy Policy for how long we keep them.
Separately, Summa keeps anonymous daily totals of the same steps, overall and per room (for example, “12 links opened today”) to see where people get stuck. These totals hold no account, cookie, device or IP information, so they can't be linked to you, and are counted whatever you choose.
Third parties
Summa's pages don't load pixels or advertising cookies from other companies. Fonts are served from our own site. The one exception is the sign-in page, which loads Cloudflare Turnstile, a security check that tells people from bots. Cloudflare may use strictly necessary cookies or similar storage for that check. Our hosting provider, Vercel, keeps standard request logs, as described in the Privacy Policy.
Why essential cookies don't need your consent
Essential cookies are needed for something you asked for, like staying signed in or saving a guest score, so the law doesn't require consent for them and they can't be switched off. Usage analytics aren't essential, so they stay off until you choose.
Do Not Track and Global Privacy Control
Summa doesn't track you across other websites, and usage analytics stay off unless you turn them on. So “Do Not Track” and Global Privacy Control signals from your browser don't change anything on Summa.
Changing your choice
Open to change your choice at any time; the link is also in the footer. You can also delete cookies in your browser. Deleting the sign-in cookies signs you out on that browser; your account and data stay, and you can sign in again. To delete your data, use Your account.
Changes
If we add or change a cookie, we'll update this page and the effective date above. If we ever want to use a new kind of non-essential cookie, we'll ask you first.
Contact
Summa. Email: summacapybara@gmail.com.