Cookie Policy

This Cookie Policy describes the cookies and similar technologies that dailymath uses on dailymath.co and what choices you have.

In short: the only cookies we set are the ones that keep you signed in. Our analytics runs cookieless and fully anonymous, and we set no advertising, marketing, or cross-site tracking cookies — so there's no cookie banner to click through.

1. What is a cookie?

A cookie is a small text file stored in your browser when you visit a website. Some technologies that aren't cookies — such as your browser's local storage — also keep data on your device, so we list those too.

2. Cookies we use

Essential — always on

These are set by Convex Auth, the service that handles sign-in. Without them you cannot stay signed in.

• __Host-__convexAuthJWT — Keeps you signed in. Set when you sign in, cleared when you sign out.
• __Host-__convexAuthRefreshToken — Renews your session so you are not signed out mid-problem.
• __Host-__convexAuthOAuthVerifier — A short-lived value used only during the Google or Apple sign-in handshake, to verify the response came back from the provider we sent you to.

The __Host- prefix is a browser-enforced security rule: it means the cookie is HTTPS-only, is scoped to this exact hostname, and cannot be set for a wider domain. It is present on the live site and absent only in local development.

That is the complete list. We set no other cookies of our own.

Stored on your device, but not cookies

• theme (local storage) — Remembers whether you chose light or dark mode.
• __convexAuthJWT_* (local storage) — Convex Auth's copy of your session token, used by the app to tell whether the session is still fresh.

Analytics — cookieless

• Visitors.now runs in cookieless mode — it never sets a cookie and never stores a cross-session identifier. We only see anonymized, aggregate traffic (pages visited, referral sources, an estimated unique-visitor count derived from a daily-rotating hash). We can't re-identify a visitor across sessions, and we don't use it for advertising.
• datavisitors is a second, cookieless analytics tool we built and self-host. It also sets no cookie and stores nothing on your device — no cookie, no local storage, no session storage. It reads your IP address only long enough to compute a visitor identifier at the edge; the IP is then discarded immediately and never reaches our database. That identifier rotates every 24 hours, so we can't re-identify a visitor across days either, and we don't use it for advertising.

3. Where we use these

Analytics — both Visitors.now and datavisitors — is loaded only on the marketing site (dailymath.co). Neither is loaded on the app surface (app.dailymath.co) or in admin areas. The sign-in cookies are set on the app surface, once you sign in.

4. Why you won't see a cookie banner

Consent is required for storing anything on your device that isn't strictly necessary. Every cookie listed above is strictly necessary — each one exists to sign you in or keep you signed in — and the same is true of the two local-storage keys. Neither analytics tool sets cookies or processes personal data, so their legal basis is legitimate interest (GDPR Art. 6(1)(f)) rather than consent. We set no advertising, marketing, or cross-site tracking cookies. With nothing on the page that requires consent, a banner would have nothing to ask you for.

Change in August 2026. We previously set a dm_acq cookie that remembered, for 90 days, which campaign or referring site first brought you here. That is marketing attribution rather than a necessity, so we removed it instead of putting a banner in front of you. If you visited before August 16, 2026 your browser may still hold a stale copy; it is no longer read or refreshed, and clearing your cookies removes it.

You can still control cookies at any time in your browser settings (Chrome, Firefox, Safari, Edge — Privacy / Cookies section). Disabling essential cookies may prevent parts of the Service from working correctly.

5. Contact

Questions: hi@dailymath.co. See also our Privacy Policy.