Cookie Policy
How Ihya Institute uses cookies on IhyaPortal.
What we use cookies for
IhyaPortal sets a small number of first-party cookies. They fall into two groups: cookies the portal cannot work without (signing you in, and keeping the sign-in form secure), and convenience cookies that only remember choices you make on this site, such as your display settings.
We do not use analytics cookies, advertising cookies, or any third-party tracking cookies. No cookie set by this site follows you to other websites.
The cookies we set
| Cookie | What it does | Lasts | Type |
|---|---|---|---|
next-auth.session-token | Keeps you signed in. Sometimes appears with a __Secure- prefix, or split into numbered parts. HttpOnly and HTTPS-only. | Up to 30 days | Strictly necessary |
next-auth.csrf-token | Security: protects the sign-in and sign-out forms from being submitted by another site. | Until you close your browser | Strictly necessary |
next-auth.callback-url | Returns you to the page you were heading for after you sign in. | Until you close your browser | Strictly necessary |
cookie_consent | Remembers that you have dismissed the cookie notice, so it is not shown again. | 12 months | Functional |
ihya-display | Remembers display choices you make — theme (light/dark), density and contrast — so the page paints correctly straight away. Only set when you change a display setting. | 12 months | Functional |
ihya_workspace | Remembers which dashboard workspace (learning, family or administration) you last used. Signed-in pages only. | 180 days | Functional |
ihya_learner | Remembers which learner you last viewed, for families with more than one. Signed-in pages only. | 180 days | Functional |
ihya-sticky-scope | A random reference (containing no personal data) that lets us give you back a form draft if a public form fails to submit while you are signed out. | 1 hour | Functional |
register_form_draft | Briefly keeps what you typed into the registration form if it fails to submit, so you do not have to retype it. Registration page only. | 2 minutes | Functional |
Payments and Stripe
Card payments happen on Stripe's own hosted checkout pages, not on this site. While you are on Stripe's pages, Stripe sets its own cookies under its own cookie policy. IhyaPortal does not load Stripe scripts or set Stripe cookies on our pages.
Managing cookies
You can delete or block cookies in your browser's settings at any time. If you block the strictly-necessary cookies you will not be able to sign in. The convenience cookies are optional: without them the portal still works, it just forgets your choices between visits.
Questions
For how we handle personal data more broadly, see our Privacy Policy. For any question about cookies, contact info@ihyainstitute.co.uk.