Cookies and storage
What your browser remembers
Effective October 20, 2026 · Last updated October 20, 2026
Website cookies and measurements
- Website session (HttpOnly)
- Keeps the website connected to your verified UnInquizitive account. Website sign-out revokes it on our servers and clears it from this browser.
- Duration: 30 days, renewed while you use the website; 90 days after sign-in at most.
- Sign-in protection
- Helps secure a sign-in attempt in this browser.
- Duration: Two minutes.
- Signed-out choice
- After you sign out on the website, stops the extension from signing this browser back in automatically until you choose Sign in with extension.
- Duration: Up to 1 year.
- First-visit source (iq_src)
- Remembers referral or campaign source, referring website, landing path, and visit time. The source can be saved with your account.
- Duration: Up to 90 days.
- Essential operator access
- Secures pages available only to authorized operators.
- Duration: 30 minutes to one hour, depending on purpose.
- Payment-provider storage
- Stripe may use cookies and browser storage for checkout, authentication, payment security, and fraud prevention.
- Duration: Determined by Stripe and browser settings.
- Website analytics
- Our website records page views, and Add to Chrome, Chrome Web Store and manual download clicks, as first-party events. They are linked to your account when you are signed in; otherwise they use a random visit identifier. Global Privacy Control turns them off. They are never sold. Vercel Analytics measures public-page visits. Google Analytics, when enabled, can set analytics cookies and collect page and device information. The extension usage-sharing switch does not control these website services.
- Duration: Website events: 180 days. Analytics cookies: determined by provider configuration and browser settings; they can persist across visits.
| Purpose | What it does | Duration |
|---|---|---|
| Website session (HttpOnly) | Keeps the website connected to your verified UnInquizitive account. Website sign-out revokes it on our servers and clears it from this browser. | 30 days, renewed while you use the website; 90 days after sign-in at most. |
| Sign-in protection | Helps secure a sign-in attempt in this browser. | Two minutes. |
| Signed-out choice | After you sign out on the website, stops the extension from signing this browser back in automatically until you choose Sign in with extension. | Up to 1 year. |
| First-visit source (iq_src) | Remembers referral or campaign source, referring website, landing path, and visit time. The source can be saved with your account. | Up to 90 days. |
| Essential operator access | Secures pages available only to authorized operators. | 30 minutes to one hour, depending on purpose. |
| Payment-provider storage | Stripe may use cookies and browser storage for checkout, authentication, payment security, and fraud prevention. | Determined by Stripe and browser settings. |
| Website analytics | Our website records page views, and Add to Chrome, Chrome Web Store and manual download clicks, as first-party events. They are linked to your account when you are signed in; otherwise they use a random visit identifier. Global Privacy Control turns them off. They are never sold. Vercel Analytics measures public-page visits. Google Analytics, when enabled, can set analytics cookies and collect page and device information. The extension usage-sharing switch does not control these website services. | Website events: 180 days. Analytics cookies: determined by provider configuration and browser settings; they can persist across visits. |
Cookie lifetimes differ from server-record retention. A cookie can expire while associated billing, authentication, or analytics information remains under the Privacy Policy.
Saved extension authentication
The installed extension can automatically sign you into the website using valid saved UnInquizitive authentication, even when no Norton activity is open. Version 4.2.0 encrypts this saved authentication, which lasts up to 30 days unless renewed. It does not authorize coursework and is separate from Norton credentials.
Website sign-out clears the website session and stops automatic reconnection in this browser until you choose Sign in with extension or open Upgrade from the extension. Saved extension authentication itself remains until it expires or the extension's data is removed, so anyone using the same browser profile can still choose Sign in with extension. If you share a browser profile, remove the extension or its saved data when finished. Removing the extension stops future automatic website handoffs; a website session already issued can remain valid until sign-out, expiry, or revocation.
Local and session storage
The extension saves account state, settings, cached courses, reminders, and pending events locally. Version 4.2.0 encrypts persistent local records. The website also encrypts sensitive saved account data. Older versions may store data differently.
Temporary memory, public metadata, and some browser-managed markers are not all encrypted. Local records can remain until replaced, removed, or cleared. Encryption cannot protect against every compromised device or person with access to your signed-in browser.
Your controls
- Turn off Share usage data to improve UnInquizitive in the extension toolbar popup to stop optional extension usage and offer-journey events. Required account, license, course-sync, run-statistic, and reliability functions continue.
- Use your browser's site-data controls to inspect, clear, or block cookies and storage for UnInquizitive. Blocking sign-in or encrypted storage may prevent account features or saved settings from working.
- Website analytics can load independently of the extension switch. Browser tracking controls and blocking tools can restrict those requests. Google also provides an Analytics opt-out browser add-on.
- Clearing data once does not prevent fresh cookies or records on a later visit. To prevent future storage, also block it or stop using the applicable feature.
- For server-held information, use the access, correction, export, and deletion process in the Privacy Policy. Clearing browser data does not send a server deletion request.