Last updated: May 2026
Cookie policy
Complete list of cookies used by Koji for Education, their purposes, and retention periods. Koji uses only cookies that are strictly necessary to operate the platform.
Overview
Koji for Education uses a minimal set of cookies, limited to those strictly necessary for platform operation. We do not use advertising cookies, marketing cookies, social media cookies, or cross-site tracking technologies of any kind.
Because all cookies used by Koji are strictly necessary for the service to function, no cookie consent banner is required under Article 5(3) of the ePrivacy Directive (2002/58/EC) as implemented in Dutch law ( Telecommunicatiewet, Article 11.7a). Strictly necessary cookies are exempt from the consent requirement.
Cookie register
| Cookie | Provider | Purpose | Type | Duration | Personal data |
|---|---|---|---|---|---|
| sb-*-auth-token | Supabase | Maintains authentication state after SAML SSO login | Strictly necessary | Session / configurable expiry | No PII stored in the cookie itself; links to a server-side session |
| sb-*-auth-token-code-verifier | Supabase | PKCE code verifier for the OAuth / SAML authentication flow | Strictly necessary | Consumed on login, then deleted | None |
| __vercel_live_token | Vercel | Preview deployment authentication (development only, not present in production) | Strictly necessary | Session | None |
Analytics
Koji uses PostHog for product analytics. PostHog is configured to collect anonymised usage events and page views only. No personally identifiable information (PII) is stored in PostHog. IP addresses are not recorded. PostHog is hosted in the EU (Frankfurt) and operates under a signed Data Processing Agreement.
PostHog uses its own first-party cookie (ph_*) to distinguish unique visitors without identifying them. This cookie contains a randomly generated anonymous identifier and does not contain any personal data. Because the analytics data is fully anonymised and no PII is processed, this cookie falls within the strictly necessary exemption for service analytics under the ePrivacy Directive as interpreted by Dutch guidance (ACM/AP).
What we do not use
The following types of cookies and tracking technologies are not used anywhere on Koji for Education:
- Advertising or remarketing cookies (Google Ads, Meta Pixel, etc.)
- Social media tracking cookies (Facebook, LinkedIn, Twitter/X)
- Cross-site tracking or fingerprinting technologies
- Third-party analytics that transmit PII (Google Analytics with IP logging, etc.)
- Cookies that share data with advertising networks or data brokers
No data from Koji cookies is shared with any third party for their own independent purposes. No data is transmitted to advertising networks, data brokers, or social media platforms.
Browser controls
You can manage or delete cookies through your browser settings at any time. Be aware that blocking strictly necessary cookies may prevent the platform from functioning correctly (for example, you may not be able to stay logged in).
Because Koji does not use any non-essential cookies, there is no cookie preference centre. There are no optional cookies to accept or reject.
Changes to this policy
If Koji adds any new cookie categories beyond strictly necessary cookies, this policy will be updated and a cookie consent mechanism will be implemented in accordance with the ePrivacy Directive and applicable national law. Changes are notified to institutional partners before taking effect.
Contact
For questions about cookies or tracking on Koji for Education, contact compliance@koji.so.