The short version. Shams AI uses only first-party cookies and browser storage that are needed to sign you in, keep the service secure and remember the settings you choose. We do not use advertising cookies, analytics or tracking cookies, session-replay tools, fingerprinting or cross-site tracking, so there is no cookie banner to accept.
Cookies are small text files a website stores on your device. “Browser storage” (local storage and session storage) is a similar way for a web page to remember information in your browser. We describe both here and call them together “storage”. This policy is part of our Privacy Policy.
All of these are first-party (set by Shams AI itself). None identifies you across other websites.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
csrftoken | Strictly necessary | Protects forms and requests against cross-site request forgery. Contains a random value only. | Up to 1 year |
sessionid | Strictly necessary | Keeps the platform operator’s administration console and a few server-rendered pages signed in. Not used for ordinary dashboards, which use a sign-in token held in browser storage. HttpOnly. | Up to 2 weeks |
shams_sso, shams_sso_bind | Strictly necessary | Protect a “Sign in with Google / Microsoft / Apple” or school single sign-on attempt against tampering while you complete it. Signed, HttpOnly, hold no readable personal data. | Minutes (about 10 and 2) |
shams_from_app | Strictly necessary | Remembers that you came from our mobile app to the website for a purchase or sign-up, so we can offer a link back to the app. | 1 hour |
shams_density, shams_sidebar, shams_brand | Preference (set when you choose) | Remember your layout choices (compact or comfortable spacing, collapsed sidebar, your school’s colour preset) so pages draw correctly before they finish loading. | 1 year |
The cookies marked “strictly necessary” are required for the service to work and are exempt from consent requirements in most places. The preference cookies are set only after you choose a layout setting and store nothing about who you are.
The redesigned dashboards and sign-in pages keep the following in your browser’s local or session storage. It never leaves your device except as the requests you make to us.
| Information | Purpose | Where |
|---|---|---|
| Your sign-in token and signed-in profile summary (for example your name and role) | Keeps you signed in on this device and lets pages draw without a delay. Expires after a period of inactivity or a maximum lifetime, and is removed when you sign out. | Local storage |
| Theme, density, sidebar state, last child or student viewed, registration progress, enrolment-form field choices | Remembers your preferences and where you were. | Local storage |
| A staff-device student session token | When a teacher opens a student’s dashboard on a staff device, the temporary student session lives only in that tab and ends when it is closed. | Session storage (this tab only) |
| Notification and installed-app information | Remembers your notification choices and lets the app work offline for a short time (cached pages and files). | Local storage and the service-worker cache |
We do not load advertising, analytics or social-media widgets. A few pages load resources from other providers, and when your browser connects to them they receive your IP address, browser type and the page you came from, and may set their own cookies:
js.stripe.com and related) on payment and billing pages, which may set cookies and use storage for fraud prevention and to process payments securely. Stripe’s own privacy policy applies.Because we use no analytics or advertising storage for anyone, the same rules apply to children: only the necessary and preference storage listed above is used. A parent or guardian of a child under 13 (or the age of digital consent where you live) should read this policy together with our Privacy Policy.
We do not track you across websites or use your information for targeted advertising, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We still honour those signals if our practices ever change.
If we add storage that is not strictly necessary, we will update this policy first and, where the law requires, ask for your consent before setting it. Questions: [email protected] or the Contact & Feedback form on our home page.