Cookie Policy
Last updated 14 November 2026
Cookies are small files a website stores in your browser. Scholar uses as few as it can: the ones it needs to work, and — only if you allow it — one kind of analytics. We use no advertising cookies and no cross-site tracking.
What we use them for
Only for things Scholar needs to work. None of them follow you to other websites, and none are shared with advertisers.
- Keeping you signed in. So you don't have to sign in on every page, and so nobody can forge a sign-in on your behalf.
- Signing in with Google, GitHub, Microsoft or your university, or connecting a Google calendar. Short-lived: each lasts half an hour at most.
- Remembering your settings. Light or dark mode and your accent colour, on this device.
- Things you saved on this device. Where you stopped in a video, and reading you kept for offline.
- Your answer about analytics. So we don't ask you on every page.
Because Scholar can’t work without them, they don’t need your consent. If you block them in your browser, you’ll be signed out.
See the full list of cookies and browser storage
| Name | What it does | How long |
|---|---|---|
| authjs.session-token | Keeps you signed in. | 30 days, or until you sign out |
| authjs.csrf-token, authjs.callback-url | Protects sign-in against forged requests and returns you to the right page. | Until you close the browser |
| authjs.state, authjs.pkce.code_verifier | Secures sign-in with Google, GitHub or Microsoft. | 15 minutes |
| scholar_door | Remembers whether you signed up as a student, teacher or administrator while Google or GitHub signs you in. | 15 minutes |
| scholar_gcal | Secures connecting a teacher's Google calendar, so Scholar can create Google Meet classes. | 10 minutes |
| scholar-theme | Remembers light or dark mode, so the page doesn't flash the wrong one. | 1 year |
| vx-theme-accent (browser storage) | Remembers the accent colour you picked. | Until you change or clear it |
| scholar-sso | Secures signing in through your university's own sign-in. | 10 minutes |
| scholar-lti-link | Remembers, while you sign in, the LMS account you are linking to Scholar. | 30 minutes |
| scholar-video:… (browser storage) | Remembers where you stopped in a video lesson, on this device only. | Until you finish the video or clear it |
| scholar-reading (browser storage) | Keeps reading you chose to save for offline, on this device only. | Until you remove it or sign out |
| scholar-consent | Remembers your answer to the cookie question, so we don't ask on every page. | 6 months |
On a secure connection the sign-in cookies carry a __Secure- or __Host- prefix. If you install Scholar as an app, your browser also keeps a copy of the app’s own files so it opens quickly; that holds none of your data.
Analytics — only if you allow it
If you say yes, Scholar uses PostHog, hosted in the EU, to count which features are used: pages visited (without the part of the address after “?”) and a short list of actions such as “task created”, each carrying only numbers. It never records what you write, what you click on, your IP address or your screen. PostHog keeps an identifier in your browser storage so it can count visits rather than page loads.
Until you say yes, the analytics code is not even loaded. Saying no is as easy as saying yes, and you can change your mind at any time here:
Analytics is switched off on this site, so Scholar stores only essential cookies and there is nothing to choose.
Error reports
When something breaks, Scholar may send a technical error report to Sentry. It sets no cookies, and IP addresses, cookies and request headers are removed before a report is sent.
More
How we handle the data these relate to is in the Privacy Policy.
Varaxis Scholar is provided by Varaxis. Write to hello@vxscholar.com about anything on this page, including privacy requests and complaints. We reply within 30 days, and sooner where the law asks for it.