Cookie Policy

Cookies are small text files placed on your device when you visit a website or web application. They are widely used to make sites work correctly, remember your preferences, and provide information to site owners. We also use similar technologies such as local storage and session storage in our web app.

This Cookie Policy applies to the Labbaik platform (uselabbaik.com) — a maktab, madrasah, mosque, and Islamic community management platform — operated by Labbaik Labs Ltd, Company No. 17166064. Registered address: Unit 21 Walker Avenue, Milton Keynes, MK12 5TW. ICO Registration Reference: ZC136003. For questions about this policy, email privacy@uselabbaik.com.

Strictly Necessary (cannot be disabled)

• supabase-auth-token — stores your encrypted authentication session so you remain logged in. Set by Supabase. Expires at end of session or when you log out.
• labbaik-admin-auth — session storage key used for admin and teacher accounts to prevent session collisions with the parent portal. Set by Labbaik. Session-scoped.
• labbaik-portal-auth — session storage key used for parent portal accounts. Set by Labbaik. Session-scoped.
• XSRF / CSRF tokens — protect against cross-site request forgery attacks. Session-scoped.

Functional

• Theme preference — stores your light/dark mode preference in local storage. Persistent, no expiry.
• Sidebar state — remembers whether the admin sidebar is collapsed or expanded. Persistent, no expiry.

Analytics (anonymised, no personal data)

Labbaik uses anonymised, aggregated usage data to understand how the platform is used and to improve it. No third-party analytics cookies (e.g. Google Analytics) are used. No data that can identify you personally is collected for analytics purposes.

Third-Party Cookies

• Stripe — when you interact with a Stripe-powered payment form or the Stripe billing portal, Stripe may set its own cookies for fraud prevention and session management. These are governed by Stripe's Cookie Policy at stripe.com/cookies-policy. We do not control these cookies.
• Google OAuth — if you sign in with Google, Google may set cookies as part of the OAuth authentication flow. These are governed by Google's Privacy & Terms at policies.google.com.
• Apple OAuth — if you sign in with Apple, Apple may set cookies as part of the OAuth authentication flow. These are governed by Apple's Privacy Policy at apple.com/privacy.

We do not use cookies or any tracking technologies for:

• Advertising or retargeting
• Cross-site tracking
• Selling or sharing your browsing data with third parties
• Profiling individual users for marketing purposes

Labbaik's optional AI features (see Artificial Intelligence Features in our Privacy Policy) work as direct, server-side calls to our AI providers — they do not set cookies, local storage, or any other tracking technology in your browser.

Strictly necessary cookies cannot be disabled as the platform will not function without them. For functional cookies (theme, sidebar), you can clear these at any time via your browser settings or by clearing site data — note this will reset your preferences.

For third-party cookies set by Stripe, Google, or Apple during OAuth or payment flows, please refer to their respective cookie policies linked in Section 3.

Most browsers allow you to view, manage, and delete cookies via their settings. Common browser guides:

• Chrome: support.google.com/chrome/answer/95647
• Firefox: support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
• Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
• Edge: support.microsoft.com/microsoft-edge/delete-cookies-in-microsoft-edge

We will update this policy if we introduce new cookies or tracking technologies. Material changes will be communicated via in-app notice or email at least 14 days before they take effect.

Labbaik Labs Ltd — privacy@uselabbaik.com
ICO Registration: ZC136003.