Cookie Policy

1. What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us provide essential functionality, remember your preferences, and improve the way our site works. Cookies may also be set by third-party services that we use.

We also use similar technologies in the browser, such as local storage, for limited purposes, for example to remember your cookie choices (see section 3) and, where needed, for essential sign-in or security flows. The law often refers to all of these together as "cookies"; this policy covers cookies and these similar technologies.

2. Types of Cookies We Use

We use different types of cookies, such as:

• Strictly necessary – required for the service to work, including sign-in and subscription management, httpOnly session cookies set by our systems where applicable, short-lived first-party cookies used during account registration or social sign-in (they expire within minutes), and limited browser storage used only for essential security or session continuity on parental accounts (for example after two-factor authentication). We also store your cookie consent choices in browser local storage so we can apply them on later visits without asking every time; that record is not used for advertising or analytics.
• Performance and analytics – helps us understand how visitors use our site (Google Analytics 4). The tag is loaded from Google's domain (googletagmanager.com). These are only activated if you opt in to Analytics in our banner or preferences.
• Functionality (non-essential) – optional preferences we may store in the browser that go beyond what is strictly required to run the service or to remember your cookie choices. We do not use this category for analytics or advertising.
• Marketing / advertising – would be used in a limited way to measure or deliver advertising to parents/guardians (for example remarketing). We ask for a separate Marketing preference in our banner, and only load Google Ads / advertising tags when you opt in. We do not serve targeted advertising to students.

3. Analytics cookies (Google Analytics 4)

If you enable analytics in our cookie banner, we load Google Analytics 4 using measurement ID G-36NK90DVG7. Typical cookies set by Google include:

Exact names and lifetimes may change as Google updates its services. We store your consent choices in localStorage under the key walnut_consent_v1 (version, analytics on/off, marketing on/off, and a saved timestamp) so we do not keep asking on every visit. Clearing site data for Walnut removes this record and you will be asked again.

If you enable Marketing as well as Analytics, we pass that choice into Google's consent signals and may load Google Ads for advertising measurement. Marketing remains off unless you opt in.

4. Third-Party Cookies

Some cookies are placed by third parties, such as:

• Analytics providers (e.g. Google Analytics 4, when you opt in).
• Payment processors.
• Advertising or social media platforms (used only to reach parents/guardians, and only when you opt in to marketing cookies).

We do not allow third parties to use cookies for their own unrelated purposes.

5. Managing Cookies

You can control cookies through your browser settings. You may:

• Delete existing cookies.
• Block cookies from being set.
• Set alerts when cookies are used.

If you block essential cookies, parts of our site may not function correctly.

You can also change your mind on our site at any time by opening Cookie preferences.

6. Consent

On your first visit to our website (including the marketing homepage at our main domain and the signed-in web application under /a), we ask you to accept or reject non-essential cookies through our cookie banner, or to set granular choices. Rejecting non-essential cookies is as easy as accepting them. You can update your choices at any time using Cookie preferences in the footer of legal pages or the control on our marketing homepage.

7. Updates

We may update this Cookie Policy from time to time. Any updates will be published on this page with the "Effective Date" updated.