Cookies and browser storage
The browser uses storage for saved app data, sign-in and necessary settings. See what is stored and what happens when you clear it or sign out. Details about individual apps and services are provided under each topic.
Analytics and ad tracking are not connectedUnderstood only confirms that you have seen the cookie notice.
When you use the website
There is no connected advertising measurement or external analytics script. The page address determines the language. Choosing Got it in the cookie notice only acknowledges that you have seen it; it does not give consent to analytics or marketing.
How the cookie notice is remembered
Choosing Got it saves a version number and timestamp in the browser as sprout.website.cookie-notice. For six calendar months, this is used to remember that you have seen the notice in this browser. The value may stay after that period until you delete it or choose Got it again. It is not sent to a server.
Read the notice again
Choose Cookies and privacy at the bottom of a page. The notice reopens and checks whether the acknowledgement is still valid. Opening it, choosing Close or pressing Escape neither deletes nor renews the acknowledgement. If storage is blocked, you can choose Close for now. The notice may then appear on your next visit.
What needs consent?
Browser storage includes cookies and similar technologies. Storage that is technically necessary for a feature you requested may be used without cookie consent if the information is used only for that feature. Analytics, advertising and other optional tracking need consent before use. They are not connected in the current website code.
Apps store information separatelySome information is kept in the browser; Browser and chat also use server storage.
What the apps save
Family, Parent Coach, Gaming & Screen Time, Learning and App Blocker save information in each app’s browser storage. My apps saves shortcuts, not installations or other apps’ content. Safe Browser saves bookmarks in the browser and rules and requests in separate private server storage in the online test. Safe Camera saves camera and mask preferences and may cache analysis files. Check message in Safe Keyboard does not retain text on reload. Sprout-chat in the open web test is a separate server feature. AI Check processes content on the device without uploading it. App Blocker stores test usage and rules locally; its parent code is stored separately as a salted hash.
Images shared to Safe Camera
When you use a supported Share to Safe Camera feature, the image file is saved temporarily on the device in IndexedDB under sprout-safe-camera-received-v1. A random ticket lets the receiving app tab retrieve the file. The ticket lasts up to two minutes. The file is deleted when the app retrieves it. Expired files are cleared the next time the inbox is used; there is no guaranteed background cleanup. This sharing does not upload the image to Sprout. Clear the app's site data to remove any files that remain.
Lesson plans in School
The lesson archive and local work in Sprout Educator stay in the teacher’s browser; downloaded copies are separate. My school uses separate Supabase sign-in with email, user ID and school access roles. The session is stored under sprout-school-auth- followed by the project ID and can refresh automatically. The mail service receives the sign-in email. Save to school sends the workspace’s plans, year overviews, groups, fictional pupil IDs and subject notes to private school storage in Supabase. Only authorised colleagues can read or edit. Local data is not transferred automatically, and unsaved school drafts stay only in memory. The school owner can archive and delete the school; clearing browser data or signing out does not delete server data. Versions and expired sessions have separate retention settings; operational logs and provider backups need separate clarification. A pupil code grants only a time-limited class session with an alias, messages and whether the Sprout page is open. The __Host-sprout-school-pupil cookie is HttpOnly, Secure and SameSite=Strict and lasts at most four hours. It does not grant access to teacher plans or notes. Test only with fictional data. Phone messages, location and Wi-Fi status are not collected.
Profile Check and links to other services
Profile Check saves your checks in the app's browser storage. A search is sent to the selected platform or search service only when you open the search link. If you choose a Bluesky lookup, Bluesky receives the username you enter and your connection's IP address. Other websites have their own cookie and privacy rules. We do not embed their profiles on this website.
Calendar information
Calendar shows a 30-day window for your account and the child access you manage. It saves activity type, time, duration and status. Automatic recording of new Sprout timers and completed tasks is off. A parent must enable it for child access. Adults can always enter time manually, including YouTube time. These are your own entries; Sprout does not monitor the phone or YouTube. Change opt-ins and delete entries in Calendar → Settings. Existing app data is not imported automatically. The 30-day window is not a deletion deadline.
Sign-in and technical cookiesSafe Browser’s cookie does not grant parent access.
Safe Browser’s workspace
Safe Browser’s online test uses __Host-sprout_browser_workspace to select this browser’s private workspace on the server. It does not grant parent access and is not a Sprout login. The cookie is HttpOnly, Secure and SameSite=Strict, applies to the whole app origin and is set with Max-Age=31536000 (one year). The period is renewed when the server sets the cookie again. Expiry or clearing does not delete server data. This cookie is separate from the website’s cookie notice and a Sprout account session.
Sprout-chat’s session cookie
Sprout-chat is available in the open web test. In the web test, __Host-sprout_chat is used as an essential session cookie for up to 24 hours: HttpOnly, Secure, SameSite=Strict and Path=/. It is separate from Safe Browser and Sprout sign-in and is not used for analytics or marketing. Expiry does not delete the room’s server data; physical deletion takes place during cleanup every hour; an incomplete job returns 503 and needs follow-up.
Your Sprout account
Your account in My apps uses Supabase for email sign-in, your user ID and app shortcuts. It does not automatically retrieve private content from the other apps. Your sign-in session is saved on the device under sprout-account- followed by the project ID and can refresh automatically. Signing out ends the session on this device. It does not delete your account or server data. The mail service receives the address and content of your sign-in email. Contact privacy@nordicdts.com about your account, retention and deletion. If you save a new over-budget purchase in Gaming, the parent account can receive a message under Account → Messages in My apps. This also applies when you change the purchase’s game, amount, date or month. This applies only to linked child access or the parent account’s own entries. Independent accounts (15+) do not send to parents. Internal identifiers link the message to the account and device. It contains the game, amount, purchase date (or month if no date was entered), budget and overspend, recording and receipt times, and the child’s device name or the label Your account. Free notes and the purchase’s free-text title are not sent. Pending messages stay in a local sending queue and can be retried for up to seven days after they are recorded. A server receipt means the message is saved on the account, not that it has been read. Later changes or deletion of the purchase do not alter an already saved message. Sprout does not retrieve bank data or purchases from games or scan old purchases automatically. A budget message does not prove that a purchase lacked permission. There is no push or email, and Sprout does not block payments. The child’s messages, photos and location are not automatically shared. Budget messages are stored privately in Supabase. Messages and related retry identifiers more than 90 days old are cleared during later use of the message feature. This is not guaranteed deletion exactly after 90 days.
Delete server data separatelyClearing the browser does not delete information on the server.
Before you clear browser data
Information on your device stays until you delete it or clear browser data. Downloaded copies need to be deleted separately. In Safe Browser’s web test, choose Slet Browser-data (Delete Browser data) under Data og forældrekode (Data and parent code). You need parent access, the current code and confirmation. This removes the name, age setting, rules, requests, approvals and access data from the current server workspace. Device bookmarks and downloaded copies remain. The server keeps the workspace’s hashed address, a deletion marker and timestamp without automatic cleanup so old tabs cannot restore the content. This deletes app data; provider logs and backups need separate confirmation. Clearing cookies does not delete server data and may leave you unable to access it. Use fictional test data only. Email privacy@nordicdts.com about server data and your rights.
Ask about cookiesNordic DTS is the controller; contact privacy@nordicdts.com.
Hosting and storage
Vercel delivers the website. Hosting may process connection data and use technically necessary storage. The exact cookie names, purposes, providers and lifetimes on the deployed addresses are not confirmed yet. This list is therefore not a full measurement of the service you visit. A Sprout account session is created only when you sign in to My apps.
Questions and changes
Email privacy@nordicdts.com about storage and privacy. Nordic Digital Trust & Safety, CVR 43132547, is the controller. If optional tools are added, this list and the choices must be updated. Any consent must be as easy to withdraw as to give.