Legal

Cookie Policy

Last updated: May 15, 2026

What cookies are

Cookies are small text files that websites store on your device. They let us keep you signed in, remember your preferences, and measure how the site is used.

Cookies White Coat World uses

Authentication. NextAuth/Auth.js session cookies (authjs.session-token or next-auth.session-token). Required to keep you signed in. Expires when you sign out or after session expiry.
CSRF protection. authjs.csrf-token. Required for sign-in flow security.
Feature flags / preferences. A small number of cookies remember UI state (sidebar collapsed, etc.).

Analytics

Our product analytics (PostHog) runs entirely server-side. It records anonymized, event-level usage (which features are used, not who used them) keyed to a random account identifier — never your name, email, GPA, or application content. Because there is no in-browser analytics script, White Coat World does not set third-party analytics or advertising cookies on your device. We do not sell this data.

What we do not use

No in-browser analytics or advertising cookies.
No cross-site tracking pixels.
No Facebook/Meta or Google Ads pixels.

Your choices

You can disable cookies in your browser settings, but core features (sign-in, messaging, account) will stop working. Because analytics is server-side and PII-free, there is no separate browser-cookie opt-out to configure.

Contact

Questions? Contact us.