Cookie Policy

Cookies are small text files placed on your device when you visit a website or web application. They are widely used to make sites work correctly, remember your preferences, and provide information to site owners. We also use similar technologies such as local storage and session storage in our web app.

This Cookie Policy applies to the Labbaik platform (uselabbaik.com) — a maktab, madrasah, mosque, and Islamic community management platform — operated by Labbaik Labs Ltd, Company No. 17166064. Registered address: Unit 21 Walker Avenue, Milton Keynes, MK12 5TW. ICO Registration Reference: ZC136003. For questions about this policy, email [email protected].

Strictly Necessary (cannot be disabled)

• supabase-auth-token — stores your encrypted authentication session so you remain logged in. Set by Supabase. Expires at end of session or when you log out.
• labbaik-admin-auth — session storage key used for admin and teacher accounts to prevent session collisions with the parent portal. Set by Labbaik. Session-scoped.
• labbaik-portal-auth — session storage key used for parent portal accounts. Set by Labbaik. Session-scoped.
• XSRF / CSRF tokens — protect against cross-site request forgery attacks. Session-scoped.

Functional

• Theme preference — stores your light/dark mode preference in local storage. Persistent, no expiry.
• Sidebar state — remembers whether the admin sidebar is collapsed or expanded. Persistent, no expiry.
• Qur’an reader preferences — in the Qur’an Companion, remembers your script, reciter, translation, text size, speed and practice settings (labbaik.quranReader.v1) and the last passage you read (labbaik.quranReader.last.v1), in local storage on your device. Set by Labbaik. Persistent, no expiry.

Analytics (only with your consent)

On our website (uselabbaik.com) we use Google Analytics to understand which pages people visit and how they find us. It only runs if you choose "Accept" in the cookie banner; if you decline or make no choice, nothing is loaded from Google. Advertising features and ad personalisation are switched off.

• _ga — distinguishes visitors. Set by Google Analytics. Expires after 2 years.
• _ga_5Z37XJ809D — keeps track of your visit (session). Set by Google Analytics. Expires after 2 years.

Your cookie choice itself is stored in local storage (labbaik-cookie-consent) so we don't ask again on every page. Google Analytics is not used inside the Labbaik web app or mobile apps.

Third-Party Cookies

• Stripe — when you interact with a Stripe-powered payment form or the Stripe billing portal, Stripe may set its own cookies for fraud prevention and session management. These are governed by Stripe's Cookie Policy at stripe.com/cookies-policy. We do not control these cookies.
• Google OAuth — if you sign in with Google, Google may set cookies as part of the OAuth authentication flow. These are governed by Google's Privacy & Terms at policies.google.com.

We do not use cookies or any tracking technologies for:

• Advertising or retargeting
• Cross-site tracking
• Selling or sharing your browsing data with third parties
• Profiling individual users for marketing purposes

Labbaik's optional AI features (see Artificial Intelligence Features in our Privacy Policy) work as direct, server-side calls to our AI providers — they do not set cookies, local storage, or any other tracking technology in your browser.

Strictly necessary cookies cannot be disabled as the platform will not function without them. For functional cookies (theme, sidebar), you can clear these at any time via your browser settings or by clearing site data — note this will reset your preferences.

You can accept or decline analytics cookies in the banner shown on your first visit, and change your mind at any time using "Cookie settings" at the bottom of every page on our website. Turning analytics off removes the Google Analytics cookies.

For third-party cookies set by Stripe or Google during sign-in or payment flows, please refer to their respective cookie policies linked in Section 3.

Most browsers allow you to view, manage, and delete cookies via their settings. Common browser guides:

• Chrome: support.google.com/chrome/answer/95647
• Firefox: support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
• Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
• Edge: support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge

We will update this policy if we introduce new cookies or tracking technologies. Material changes will be communicated via in-app notice or email at least 14 days before they take effect.

Labbaik Labs Ltd — [email protected]
ICO Registration: ZC136003.