How Llamaroo uses cookies and storage

Cookies are small text files placed on your device by a website. "Similar technologies" includes browser local storage and session storage, which allow websites to store small amounts of data on your device to remember preferences or maintain session state.

Cookies may be "first-party" (set by the site you are visiting) or "third-party" (set by a different domain). They may be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain until they expire or you delete them).

Under the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR, strictly necessary cookies do not require consent. They are essential for the service to function and are set on the basis of legitimate interest.

Functional storage that remembers your display preferences is also treated as strictly necessary where it is integral to delivering the service you requested.

We do not currently use any analytics, marketing, or non-essential cookies. If we introduce them in future, we will update this policy, obtain your consent before setting them, and provide a mechanism to manage your preferences.

The following table describes the cookies and browser storage our platform uses. All items listed are strictly necessary for the platform to function.

• Clerk authentication cookies (first-party, strictly necessary): Our identity provider, Clerk, sets HTTP-only session cookies on our domain when a teacher signs in. These maintain your authenticated session and protect against cross-site request forgery. They expire when you sign out or after the session lifetime configured by Clerk (typically 7 days of inactivity). Llamaroo does not read or modify these cookies directly.
• Student session token (local storage, strictly necessary): Key "llamaroo:studentSession". Stores an opaque session token so students remain connected to their classroom session. Persists until the student leaves the class or the browser storage is cleared.
• Session progress (local storage, strictly necessary): Key "llamaroo:progress". Stores learning progress (XP, coins, module completion) for guest users who are not connected to a classroom. Persists until cleared.
• Teacher UI restore state (local storage, strictly necessary): Key "llamaroo:teacherRestoreState:v1". Remembers which admin tab and detail view a teacher was using so the interface can restore on reload. Persists until cleared.
• Student workspace identity (local storage, strictly necessary): Keys "llamaroo:studentWorkspace" and "llamaroo:studentWorkspaceMeta". Store the active workspace ID and cached branding (name, logo) so the correct school theme loads on first paint.
• Theme snapshot (local storage, strictly necessary): Key "llamaroo:theme-snapshot:{workspaceId}". Caches the current colour theme so the page renders without a flash of unstyled content.
• Mood preference (local storage, strictly necessary): Key "llamaroo:mood:{workspaceId}". Stores the selected visual mood for unauthenticated users so the chosen theme persists across visits.
• Last admin workspace (local storage, strictly necessary): Key "llamaroo:last-admin-workspace-id". Remembers which workspace an administrator last used.
• Teacher auth intent (session storage, strictly necessary): Key "llamaroo:teacherAuthIntent". A temporary flag set during the sign-in flow. Cleared when the browser tab closes.
• Device hint (session storage, strictly necessary): Key "llamaroo:deviceHint". A random, non-identifying per-tab identifier used for operational context. Cleared when the browser tab closes.
• Entry composer stash (session storage, strictly necessary): Keys "llamaroo_entry_pending_composer_v1" and "llamaroo_entry_pending_ai_prompt". Temporarily save a teacher's in-progress course prompt so it survives a sign-in redirect. Cleared when the browser tab closes.

Some functionality relies on third-party services that may set their own cookies or use similar technologies on their own domains. We do not control these cookies.

Clerk (clerk.com): Provides teacher authentication. Clerk may set cookies on its own domain during sign-in flows. See Clerk's privacy policy at https://clerk.com/legal/privacy.

Stripe (stripe.com): Processes payments. When you are redirected to Stripe's hosted checkout or customer portal, Stripe may set cookies on stripe.com. See Stripe's cookie policy at https://stripe.com/gb/cookie-settings.

Google Fonts (fonts.googleapis.com, fonts.gstatic.com): We load typefaces from Google's font CDN. Google may log requests; see Google's privacy policy at https://policies.google.com/privacy.

Google Generative AI (generativelanguage.googleapis.com): AI features call Google's API from the browser when a teacher uses AI course generation with their own API key. Google may apply its own cookie and data handling policies to those requests.

To be clear about what Llamaroo does not do:

• We do not use advertising or marketing cookies.
• We do not use analytics cookies or third-party analytics services (such as Google Analytics, Mixpanel, or similar).
• We do not use social media tracking pixels or share buttons that set cookies.
• We do not use fingerprinting or any covert tracking techniques.
• We do not sell, rent, or share cookie data with data brokers or advertisers.
• We do not set cookies in the student-facing learning experience beyond the strictly necessary items listed in section 3.

Because we only use strictly necessary cookies and storage, we do not currently display a cookie consent banner. Under PECR, consent is not required for cookies that are essential to provide a service you have requested.

You can still manage or delete cookies and local storage through your browser settings. Please note that clearing this data may sign you out, reset your display preferences, or interrupt a classroom session.

Most browsers allow you to block or delete cookies, clear local storage, and clear session storage. Consult your browser's help documentation for instructions specific to your browser.

If we introduce non-essential cookies in the future, we will implement a consent mechanism allowing you to accept or reject them before they are set.

Llamaroo is designed so that students can participate in classroom learning without personal accounts or identifying information. The browser storage items set during student use (session token, workspace identity, theme) do not contain personal data and are strictly necessary for the learning experience to function.

We do not use any analytics, profiling, or tracking cookies in the student-facing experience.

We may update this Cookie Policy from time to time, for example if we add new services or change our use of cookies. Changes will be posted on this page with an updated date.

If we introduce non-essential cookies, we will notify you and obtain consent before setting them, in accordance with PECR and UK GDPR.

If you have questions about our use of cookies or this policy, please contact us.

Email: privacy@llamaroo.com

Post: Llamaroo Ltd, Flat 204, Renown House, London E14 3ZS

You also have the right to raise concerns with the UK Information Commissioner's Office (ICO) at https://www.ico.org.uk.