The only cookie is a technical one that tells this site whether you're signed in to the web app. It holds nothing that identifies you. No analytics cookies, no advertising ones. That's why you haven't been asked to accept anything.
Really, none?
Really. This is a static site: some HTML, one stylesheet, a little JavaScript and two typefaces, served from prepstellar.com, plus one small visit counter described below. Nothing is stored on your device and nothing follows you afterwards.
The one exception is not a cookie: if you switch between the light and dark base, that choice is remembered in your browser's own local storage, on your device only. It never reaches us, and clearing your browser data removes it.
How we count visits
We use Umami, a privacy-focused analytics service, to count page views and taps on the store buttons. It sets no cookies, stores nothing on your device, builds no profile of you and cannot recognise you on any other website. We see totals: which pages are read, which country and kind of device visits come from, and which site sent them.
To do that, your browser loads a small script from Umami's servers and sends them the address of the page you opened. Like any web request, it carries your IP address and browser type. Umami uses them to tell one visit from another and to work out the country, and does not keep the IP address.
If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is counted. The web app uses the same counter, in the same way, as described below.
No other third parties
There's no Google Analytics, no advertising pixel, no embedded video and no external font service. Even the typefaces are served from our own domain: loading them from a font provider would hand them your IP address just for reading this page.
And the web app?
The web app at app.prepstellar.com sets only that technical cookie and has no advertising or tracking. To keep you signed in and let your progress follow you, it keeps your session, your preferences and your local progress in your browser's own storage. That is strictly necessary for the service you asked for, so it needs no consent. Study content isn't stored there: it stays in memory while the tab is open.
The web app counts visits with the same Umami counter as this website. It sets no cookies, stores nothing on your device for it and never receives your account, user ID, email address or name. We see totals: which screens are opened (a lesson, a test or the Premium page, for example), a few steps such as signing up, choosing a course, finishing a test or starting a purchase, and the site that sent you. If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is counted.
Besides that counter, three providers can load their own code in the web app, each for a specific job: Google reCAPTCHA, which checks that requests come from a person and may use its own cookies or storage for that security purpose; the Google or Apple sign-in window, if you choose to sign in that way; and, when you pay, the secure checkout from RevenueCat and Stripe, which may use cookies to process the payment and prevent fraud. What they store is covered by their own policies. Details in the Privacy Policy.
What about the waitlist?
The waitlist is closed now that the app is out. While it was open, the form sent your email address to our own server, which stored it in a file. No cookie involved. What happens to that address is in the Privacy Policy.
If this ever changes
If we ever add something that needs cookies (advertising, say), we'll ask for your consent first, with a real choice and a real reject button, and we'll update this page before it goes live. Not after.