Cookies and local storage
Last updated: 2026-11-08 · Version 2026-11-08
This page lists everything Boost Type stores on your device. It supplements the Privacy Notice.
Inventory
| Name | Type | Purpose | Lifetime | Necessary? | Status |
|---|---|---|---|---|---|
ti_session | First-party cookie (HttpOnly, SameSite=Lax, Secure on the live site) | Keeps you signed in after you log in. Holds a random token; the server stores only a hash of it | 30 days, renewed while you use the service; deleted when you sign out | Yes: strictly necessary | Confirmed in the code |
ti_oauth | First-party cookie (HttpOnly, SameSite=Lax), only sent to our Google sign-in endpoint | Only if you choose "Continue with Google": protects the sign-in against forgery (a random state and PKCE value) | 10 minutes, deleted when you return from Google | Yes: strictly necessary | Confirmed in the code |
ti_oauth_pending | First-party cookie (HttpOnly, SameSite=Lax) | Only for a new Google sign-up: remembers it while you accept the Terms | 15 minutes, deleted when your account is created | Yes: strictly necessary | Confirmed in the code |
ti_guest | First-party cookie (HttpOnly, SameSite=Lax, Secure on the live site) | Gives a visitor who has not signed in a private guest profile, so their first tests are kept and can be added to an account if they sign up | 1 year, or until you sign in or clear cookies | Yes: strictly necessary to provide the service you asked for | Confirmed in the code |
ti-theme | localStorage | Remembers the color theme you chose in Settings and applies it before the page paints to avoid a flash | Until you clear site data | Remembering a choice you made (user-requested setting) | Confirmed in the code |
ti-test-cfg | localStorage | Remembers your test options (mode, length, punctuation and numbers) so your next test starts the same | Until you clear site data | Remembering a choice you made (user-requested setting) | Confirmed in the code |
ti-prefs | localStorage | Remembers your typing preferences (text size, caret style, sound, hidden live numbers, confidence mode, word list) | Until you clear site data | Remembering a choice you made, or necessary to provide the service you asked for | Confirmed in the code |
ti-pending-runs | localStorage | Holds a finished test on this device until the server confirms it is saved, so a lost connection never loses a test; removed once saved | Until you clear site data | Remembering a choice you made, or necessary to provide the service you asked for | Confirmed in the code |
ti-custom-text | localStorage | Remembers the custom text you pasted for practice | Until you clear site data | Remembering a choice you made, or necessary to provide the service you asked for | Confirmed in the code |
ti-session | localStorage | Remembers which step of a practice plan you were on so a reload does not lose your place; removed after 12 hours or when you finish | Until you clear site data | Remembering a choice you made, or necessary to provide the service you asked for | Confirmed in the code |
ti-tz | localStorage | Remembers your time zone so streaks and reminders follow your own day | Until you clear site data | Remembering a choice you made, or necessary to provide the service you asked for | Confirmed in the code |
ti-seen-start | localStorage | Remembers that you dismissed the welcome tour box | Until you clear site data | Remembering a choice you made, or necessary to provide the service you asked for | Confirmed in the code |
ti-pmf | localStorage | Remembers that you answered or dismissed the one-time feedback question | Until you clear site data | Remembering a choice you made, or necessary to provide the service you asked for | Confirmed in the code |
| Stripe checkout cookies | Set by Stripe on its own domain (checkout.stripe.com, billing.stripe.com) | Run the hosted checkout and customer portal and prevent fraud | Set by Stripe | Necessary for payment | On Stripe's pages, not ours; see Stripe's cookie policy |
This list was checked against the code (search for cookies and localStorage). Stripe's checkout and billing portal set their own cookies on Stripe's domain and we cannot confirm exactly what; see Stripe's cookie policy. Browser storage you can inspect yourself in your browser’s developer tools under Application or Storage.
Analytics
We count page views and feature use with cookieless analytics: no cookie, no localStorage entry, no fingerprinting, and no raw IP address stored. Analytics never receive keystroke data. The provider is listed on the Subprocessors page. [ANALYTICS PROVIDER AND MODE: to be confirmed]
Managing storage
You can delete these items at any time by clearing site data in your browser, or block cookies in your browser settings; if you block the session cookie you will not be able to stay signed in. Clearing ti-theme and ti-test-cfg simply resets your theme and test options. There is nothing to opt out of because nothing here is optional tracking. We honor the Global Privacy Control signal.