Cookie Policy

Cookies are small files a website stores on your device. Browser storage (such as local storage) does a similar job, so we cover it here too. CourseXpress is provided by Koar Group Limited. We only use cookies and storage needed to run the service and remember the choices you make. We don't use advertising cookies, analytics cookies or tracking pixels, so we don't show a cookie banner.

These are strictly necessary. Our sign-in provider, Clerk, and its network provider, Cloudflare, set them.

• __session: shows you're signed in. It lasts a short time and is renewed while you stay signed in.
• __client, __client_uat and __client_uat_ followed by a code: keep your sign-in working between visits. They can last up to 10 years unless removed, though browsers may limit this, and signing out or clearing cookies ends your sign-in.
• __cf_bm: helps protect sign-in from bots. It lasts 30 minutes.
• _cfuvid: helps protect sign-in from abuse. It lasts until you close your browser.
• __clerk_environment (browser storage): holds sign-in settings so the sign-in box loads correctly. It contains nothing about you.

These are set by CourseXpress itself and only when you use the feature concerned.

• invite_token, auth_redirect: carry a course invitation through sign-in (30 minutes).
• oauth_code_verifier, oauth_state, oauth_workspace_id, oauth_next: secure the connection when you link Google Drive (10 minutes).
• settings_saved: confirms your settings were saved (10 seconds).
• cx-mode: remembers whether you were last creating or learning (1 year).
• microLmsTheme (browser storage): remembers light or dark mode until you clear it.
• coursexpress-import (browser storage): keeps a course import you haven't finished, including your file, in this browser so it survives the page reloading. Deleted when you finish it, start over or sign out; if older than 24 hours, it's deleted the next time you open Add a course.

Some features open or embed a service run by another company, which may use its own cookies under its own policy. This happens only when you use that feature:

• Stripe, when you pay or manage a subscription
• Google, when you sign in with Google or choose files from Google Drive
• YouTube or Vimeo, when a course creator includes a video in a lesson. We load these players in their privacy-enhanced modes, but those companies may still store data on your device, especially once you play the video.

You can block or delete cookies in your browser settings; your browser's help pages explain how. If you block the cookies in section 2, you won't be able to sign in. Choices you make in your browser apply only to that browser on that device.

We'll update this page and the date above if the cookies we use change, and we'll ask for your consent first if we ever add cookies that need it. Questions: support@coursexpress.io. Our Privacy Policy has more on how we handle personal data.