Cookie Policy

Our application sets two first-party authentication cookies on the host you sign in to:

• accessToken : authenticates requests so you can use account features. Its configured default lifetime is 15 minutes from when it is set.
• refreshToken : allows us to renew your signed-in session without asking for another code on each visit. Its configured default lifetime is 30 days from when it is set.

These cookies contain authentication tokens and apply across the host's paths. They are unavailable to ordinary page scripts and are sent over secure connections in production. When a session is refreshed, the cookies are replaced and their browser lifetimes restart. Server-side session expiry or revocation may end access earlier. Logging out removes both cookies from that browser.

We use these cookies to provide the signed-in service you request and protect access to your account. Strictly necessary authentication storage does not require consent where the applicable law provides that exemption. Blocking it can prevent account features from working. Cookie expiry is separate from retention of server records.

The Service checks your device's light or dark appearance setting. Its appearance functionality also checks a local-storage entry named theme , if present, to determine the appearance to display. This entry stays in your browser and has no automatic expiry; it remains until cleared or replaced. It is not an advertising identifier.

You can clear this entry through your browser's site-data controls and change your device's appearance setting. If no saved appearance is present, the Service defaults to your device setting. Local storage is different from a cookie, but access to it must still meet applicable storage and privacy requirements.

If you choose to create an account or log in and use a reading-speed result, we temporarily store that result, a random flow identifier and an expiry time in local storage under entold:reading-speed-transfer . It lets us carry your result through authentication and save it to your account automatically. The result is valid for 30 minutes. We remove it when claimed for saving or when checked after expiry; you can also remove it through your browser’s site-data controls. Taking the test alone does not create this entry.

We do not use advertising cookies or non-essential analytics cookies. We use server-side operational information to monitor reliability and security; this does not mean all server logs are anonymous. Our Privacy Policy explains the handling of technical information and our service providers.

The Service does not currently provide a cookie-consent banner or preference tool. Exemptions depend on the purpose of each technology and the law that applies; an exemption for authentication does not automatically cover appearance storage or technologies supplied by an infrastructure provider. Where consent is required, it must be obtained before the relevant storage or access, with a way to withdraw it. Continuing to browse does not by itself give that consent.

Your browser settings let you inspect, block or delete cookies and local storage for this site. Controls differ between browsers, and clearing cookies alone may not clear local storage. If you block or remove authentication cookies, you may be signed out or unable to use account features. Clearing site data does not delete your Entold account or reading history stored on our servers.

To request account deletion or ask about personal information, see our Privacy Policy or email our support team.

We will update this policy when our use of storage technologies changes, including relevant provider-set technologies, and obtain consent where required before using them. We will give reasonable notice of material changes. The date above identifies this version. For questions, contact our support team.