1. The short version
Cookies are small text files a website saves on your device. Tutorly sets only the cookies it needs to work: keeping you signed in and honouring invite links. There are no advertising cookies, no analytics cookies, and no third-party trackers.
That's why you don't see a cookie banner. UK law (PECR) only requires consent for cookies that aren't essential to the service you asked for, and we have none of those. If we ever want to add optional cookies, we'll ask first.
2. The cookies we set
All of these are set by tutorly.com itself. None come from advertisers or analytics companies.
sb-…-auth-token
Set when you sign in. Holds your login session so you stay signed in between visits. Everything that needs an account depends on it.
Lasts: Up to 400 days, refreshed while you use the site. Removed when you sign out.
bypass
Set when you enter an early-access code or redeem an invite before launch. Remembers that the waitlist gate should let you through.
Lasts: 30 days.
bypass_operator
Set only when an access code is typed directly on the waitlist page. Shows internal preview controls to the person who entered it.
Lasts: 30 days.
founding_invite
Set when a founding tutor opens their invite. Carries the invite through signup so the account is created against the right invitation.
Lasts: 2 hours.
school_gate
Set when a school opens its invite link. Confirms the signup page was reached through a valid invite.
Lasts: 2 hours.
3. Other storage on your device
A few features use your browser's local storage instead of cookies: your light or dark theme choice, your Bao study streak, drafts of tutor applications and listings, and mock exam answers in progress, so a refresh doesn't lose your work. This data stays on your device and isn't used to track you.
4. Stripe and Daily.co
Payments happen on Stripe's own checkout and billing pages, not ours. Any cookies Stripe uses there are set on stripe.com under Stripe's cookie policy. We load no Stripe scripts on tutorly.com.
Live lessons use Daily.co for video. The call connects from our page straight to Daily's servers to carry the audio and video; there is no embedded Daily website on our pages. What each provider processes is covered in our privacy policy.
5. Managing cookies
You can block or delete cookies in your browser settings at any time. Because everything we set is functional, removing it has visible effects: deleting the sign-in cookie signs you out, and deleting an invite cookie means entering your code again.
6. Questions
Email privacy@tutorly.com and we'll help.