SkillCoded uses essential first-party storage for Google-authenticated accounts and an optional Google Analytics capability. Account authentication and Analytics are separate. The Analytics tag is completely blocked unless you accept, and rejecting or ignoring Analytics does not restrict public learning or account access.
Essential and preference storage
- __Host-skillcoded_session: an essential random session token used after sign-in. It contains no account details or learning progress, has no persistent browser expiry, and is rejected by the server no later than 24 hours after sign-in.
- skillcoded_optional_consent: remembers only
analytics_grantedoranalytics_deniedfor 180 days. It is not a visitor or account identifier. - Aggregate page counter: records daily totals without creating a cookie, browser identifier, or visitor profile.
Google account authentication
Visiting the sign-in page loads the Google Identity Services client from accounts.google.com. The button and account chooser communicate with Google only when you choose to create, access, migrate, or reauthenticate an optional SkillCoded account. Google may read its own session state in the Google context so it can display available accounts and obtain your permission.
SkillCoded sets __Host-skillcoded_google_nonce, a short-lived, HttpOnly, Secure, SameSite=Strict security cookie for up to ten minutes to prevent forged or replayed sign-in responses. It contains no profile information and is removed after use or expiry.
Google authentication does not set the SkillCoded analytics-preference cookie, does not grant Analytics or advertising consent, and works when Analytics is rejected.
Optional Google Analytics
If you accept, SkillCoded loads the direct Google tag and permits:
- _ga: distinguishes a browser using a pseudonymous client identifier. Maximum duration: 60 days from first set.
- _ga_<container-id>: persists session and property state. Maximum duration: 60 days from first set.
The cookies do not extend their expiry on later page loads. Google Analytics receives only allowlisted events, sanitized page locations without query or fragment, an approved campaign source when present, and limited session, approximate-location, browser, and device information. It does not receive account identifiers, answers, scores, or free text.
Before acceptance and after rejection, SkillCoded does not load gtag.js, create Google Analytics cookies, or make any Google Analytics request. Analytics is not used for advertising or remarketing.
Your choices
You can reopen Privacy and cookie settings from the footer at any time. Withdrawal stops future Google Analytics collection, removes the known _ga cookies available to SkillCoded, and reloads the page. It does not undo processing that occurred before withdrawal. Browser controls can also remove stored data, although removing an active session cookie signs you out.
For the data categories, purposes, recipients, retention limits, transfers, and data-protection rights, see the Privacy Notice.