What this policy covers
Cookies are small values your browser sends back to a site. Local storage saves information in your browser, and an offline cache keeps files so previously loaded parts of the app can open without a connection. Gulp uses these technologies for its login, saved practice and chosen settings.
This version of Gulp does not include advertising trackers or optional analytics. We do not present an “accept all” control for tracking that we do not use. If optional technologies are introduced, we will update this policy and request consent before using them where required.
Login cookies
- __Host-glance-session: authenticates your browser with the account service after you log in. It expires after 180 days and can renew as you use the app. Logging out clears the browser login. In production it is Secure, HttpOnly and SameSite=Lax, so scripts cannot read the cookie.
- __Host-glance-oauth: protects the Google login flow and binds its return to the browser that started it. It lasts up to 10 minutes and is cleared as the login flow finishes. It is also Secure, HttpOnly and SameSite=Lax in production.
Development copies use the names glance-session and glance-oauth without the production prefix. These cookies serve authentication and security functions; they are not advertising identifiers.
Saved practice and preferences
Local storage under names beginning with subvocal-trainer. holds practice history, answers and notes, saved texts, reading positions, medals, goals, display settings and related progress. It lets you use the app on this device and supplies the snapshot used for account sync and backups.
If you join the early access list, subvocal-trainer-waitlist.v1 remembers the email address this browser added and when, so the site shows you’re on the list instead of asking again. It never leaves this device. Other app storage, including subvocal-trainer-account.v1, holds a cached account profile, sync bookkeeping and device-specific state such as saved result screens and subscription status. The current browser session credential is kept in the protected cookie, not in the profile cache. Older versions’ stored credentials are removed when migrated.
Local storage has no automatic expiry. It remains until the app, you or your browser removes it. Logging out can leave practice and texts on the device. On a shared device, clear the saved data when you finish.
Offline files
The app’s service worker stores app files and previously requested resources in a cache whose name begins with glance-reader-. It removes older app caches when a new version activates. The account API is excluded from this cache. Browser controls can remove offline files at any time.
External services
Google Fonts receives normal browser request information when fonts load. Choosing Google login opens Google’s service. Opening checkout or Manage subscription takes you to Stripe, which may use its own storage for payment, authentication and fraud prevention. Those services explain their technologies in Google’s cookie information and Stripe’s cookie policy.
Your controls
- End your login: choose Log out in Settings. This does not cancel billing or erase all saved practice.
- Export or reset practice: use Settings, Your data. When logged in, a reset replaces current account progress on the next successful sync; it is not account erasure.
- Remove local storage and offline files: use your browser’s site-data settings for this website. Removing all site data can log you out, reset settings and remove unsynced results or saved texts. Download a backup first if you want to keep them.
- Block storage: your browser can block cookies or other storage. Login, syncing, saved settings and offline practice may then be unavailable.
Browser controls do not delete account records or cancel recurring payments. See the Privacy policy for account erasure and the Cancellation and refunds policy for billing.
Contact
A private contact email has not yet been published. Please check this page again before creating an account or buying a plan.