Skip to main content

Cookie Policy

The cookies and browser storage LadderPrep uses, and why.

Effective date: October 25, 2026

Last updated: October 25, 2026

This page describes the cookies and browser storage that LadderPrep uses, including items written by the software libraries our site is built on. We use only what the site needs to work: keeping parents and children signed in, remembering a few of your choices, and making navigation and site updates work smoothly. We use no advertising, analytics or tracking cookies, and we do not let other companies set cookies through our pages, except YouTube when you choose to play a video (see below).

Cookies and storage we use

NameTypeWhat it doesHow long it lasts
__Secure-better-auth.session_tokenCookieKeeps a parent signed in7 days by default, renewed at most once a day while you use the site
__Secure-better-auth.stateCookieSet only when a parent chooses Google sign-in. It holds a signed random value that lets us check that Google's reply belongs to the sign-in you started.Up to 5 minutes; removed when Google returns you to LadderPrep
__Host-lp_kidCookieKeeps a child signed in on that device. It holds a random value and cannot be read by page scripts.30 days from sign-in; never extended
PARENT_LOCALE_CHOICECookieRemembers the language you chose for parent pages. LadderPrep is in English only for now, so this cookie is not set.Up to 365 days
sidebar_stateCookieRemembers whether the side menu in your dashboard and settings is open7 days
better-auth.messageBrowser local storageTells your other open tabs when you sign out or change your account, so they stay in step. It holds the type of event, a random identifier and the time.Until it is replaced by the next event or you clear your browser's site data
lp:extra-bank-openBrowser local storageOn a child's extra practice page, remembers which topic sections were left openUntil you clear your browser's site data
lp:kid-review-hint: followed by the child's internal profile IDBrowser local storageRemembers that a child has already seen the one-time note on the review card, so it is not shown again on that deviceUntil you clear your browser's site data
tsr-scroll-restoration-v1_3Browser session storageRemembers where you had scrolled on each page, so Back and Forward return you to the same placeUntil you close the tab
chunk-reload-atBrowser session storageLets a page reload once, without looping, after we release an updateUntil you close the tab

All of these are first-party: only ladderprep.com can read them.

On child pages the only cookie we create is the child's sign-in cookie. Child pages also use the two local-storage items for extra practice and the review note, and the two session-storage items (scroll positions and the update reload note). These items stay in the browser; we do not read them on our servers. When a parent switches a device to a child, the parent is signed out, which removes the parent's sign-in cookie and can update the better-auth.message item. Child pages never read or write the language cookie.

Other sign-in cookies. __Secure-better-auth.dont_remember is a cookie that lasts until the browser closes. Our sign-in system uses it for a sign-in that should not be remembered after the browser closes; in that case the parent sign-in cookie above also lasts only until the browser closes. Our current sign-in form does not offer this option. LadderPrep administrators using an account-support tool can also receive this cookie and __Secure-better-auth.admin_session (up to 7 days).

Cookies set by others

  • YouTube. Our home page and some public lesson pages can show a video hosted on YouTube. Nothing is loaded from YouTube until you press play. When you do, the video loads from youtube-nocookie.com, and YouTube (Google) may store information on your device under Google's privacy policy. See "YouTube videos on our public pages" in our Privacy Policy.
  • Stripe. When you buy an enrollment, you pay on a checkout page run by Stripe on Stripe's own website. Stripe uses its own cookies there, for example to process the payment and prevent fraud, under Stripe's privacy policy.
  • Google sign-in. If a parent chooses Google sign-in, you sign in on Google's own website. Google uses its own cookies there under Google's privacy policy. Child pages never use Google sign-in.

Managing cookies

You can block or delete cookies and site data in your browser settings. If you delete the sign-in cookies, you or your child will be signed out; if you block them, you cannot sign in. Deleting the language cookie does not change the language saved in your account.

Changes to this policy

When we change this policy, we update the date at the top and post the new version here.

Contact us

Questions about cookies: email support@ladderprep.com or write to Raptune Limited, Unit 18, 8/F, Peter Leung Industrial Building, 103 Wai Yip Street, Kwun Tong, Kowloon, Hong Kong.