Cookie notice
Masar CFA sets one cookie of its own, and only to keep you signed in. There are no advertising, analytics or tracking cookies, so there is nothing to accept or refuse. The few usage statistics we keep are daily totals counted on our own server, without any cookie (privacy policy, section 2).
The cookie
| Name | Purpose | How long | Type |
|---|---|---|---|
__Host-masar_sid | Keeps you signed in. It holds a random sign-in token; the server keeps only a hash of it. | Ends after 14 days without use, 30 days at most, or when you sign out (owner and admin accounts: 12 hours without use, 7 days at most) | Strictly necessary, first-party. Scripts cannot read it, it is sent only over HTTPS and never from other sites. |
Because the service cannot work without it, this cookie does not need your consent. If you block it, you cannot sign in.
Storage on your device
The app also keeps some information in your browser's storage (not cookies) so it can work quickly. These are not used to track you, and none of it is an advertising or analytics identifier. The table lists every item. cfa_cc_state_v1:<account> stands for a name that starts with cfa_cc_state_v1: and your account number.
| Name | Purpose | How long | Removed at sign-out? |
|---|---|---|---|
cfa_cc_state_v1:<account> | A copy of your study progress and settings (answers, flashcards, mocks, notes, streak), so the app opens quickly and keeps your place. The same progress is saved on our server so that it follows you to any device. Local storage. | Until you sign out (once your progress is saved to our server) or clear this site's data. | Yes, once it is saved to our server |
cfa_cc_aiarch_pending:<account> | AI tutor chats older than 6 months that the app has moved out of your synced progress, kept here only until they are saved in your account's chat archive (usually seconds). Local storage. | Until the archive on our server has them, or until you clear this site's data. | No (removed once they are saved to your account) |
cfa_cc_state_v1:claim and cfa_cc_state_v1 | Only for people who studied on the earlier single-file version of Masar-CFA in the same browser: a note of which account was offered that old local copy, and the old copy itself. Local storage. | Until you clear this site's data. | No. Clear this site's data to remove them. |
cfa.vpos.<module> | Where you stopped in a lesson video (the number of seconds), so it can resume. Local storage. | Until you clear this site's data. | No |
masar_learn_lang:<account> | The language you chose for the transcript beside a lesson video (for example English or Arabic), so it opens in that language next time. Local storage. | Until you clear this site's data. | No |
masar-theme | Your light or dark display choice, if you use the theme switch in the header. Local storage. | Until you clear it or change the choice. | No, so the page keeps your display choice |
masar.ret | The page you were opening when you were sent to sign in, so you land there afterwards. Session storage. | Until you sign in, or 12 hours, or you close the tab. | Yes |
masar.reveal.v1 | A note that the short opening animation of the brand mark has been shown. Session storage. | Until you close the tab. | Not applicable |
cfa.voice.v2 | Your choice of read-aloud voice, speed and on/off switch. It belongs to the optional read-aloud voice feature, which is switched off in the current release; it is listed so this notice stays accurate if the feature is turned on. Local storage. | Until you clear this site's data. | No |
cfa-voice | Audio clips of narration already made on your device by the optional read-aloud voice, so they play at once next time (an IndexedDB database in your browser). Nothing is sent to us. Switched off in the current release. | Until you clear this site's data. | No |
cfa-voice-model | The speech model file the optional read-aloud voice downloads once and keeps on your device (an IndexedDB database in your browser). Nothing is sent to us. Switched off in the current release. | Until you clear this site's data. | No |
cfa_sync_test | A developer switch that lets staff test progress saving on a non-secure address. The app only reads it and never writes it; it is empty unless a developer sets it by hand. Local storage. | Not set by the app. | Not applicable |
cfa.ai.v1 | An old name for settings kept by an earlier version of the tutor. The app deletes it when it finds it. | Removed on the first visit. | Already removed |
The sample film on our website stores nothing in your browser. When you sign out, the app removes everything in the table marked Yes. Session storage is cleared when you close the tab. To remove everything, clear this site's data in your browser settings.
Other sites
The font the app uses (Readex Pro) and the player for the sample film are served from our own site: no other company receives a request when they load, and they set no cookie.
On the waiting list form, the sign-up form and the contact form, Cloudflare Turnstile checks that a person, not a program, is using the form. It loads from Cloudflare and processes technical information from your browser (such as your IP address and browser characteristics) for that security check only, under Cloudflare's privacy policy. Cloudflare, which carries all traffic to our site, may also set its own strictly necessary security cookie when it needs to tell people from automated traffic. Neither is used for advertising or to follow you across sites.
If we ever add a cookie that is not strictly necessary, we will update this notice and ask for your consent first.
Questions: [email protected].