Cookie notice
Masar-Fintech sets one cookie of its own to keep you signed in, and a small language cookie that remembers whether you read the site in English or Arabic. If you choose "Continue with Google", it also sets a second, temporary one for the few minutes that sign-in takes. There are no advertising, analytics or tracking cookies, so there is nothing to accept or refuse. The few usage statistics we keep are daily totals counted on our own server, without any cookie (privacy policy, section 2). Our host also runs Cloudflare Web Analytics on public pages to count aggregate page views; it sets no cookies and uses no browser storage.
The cookie
| Name | Purpose | How long | Type |
|---|---|---|---|
__Host-masar_sid | Keeps you signed in. It holds a random sign-in token; the server keeps only a hash of it. | Ends after 14 days without use, 30 days at most, or when you sign out (owner and admin accounts: 12 hours without use, 7 days at most) | Strictly necessary, first-party. Scripts cannot read it, it is sent only over HTTPS and never from other sites. |
__Host-masar_gflow | Only if you choose "Continue with Google". It holds a signed, random value that links your return from Google to the sign-in you started on this device (it carries no name or email). | 10 minutes at most; it is cleared when the Google sign-in ends | Strictly necessary for that sign-in, first-party. Scripts cannot read it and it is sent only over HTTPS. |
masar_lang | Your language choice (the EN | ع switch): en or ar. It lets our pages and e-mails use the same language. It holds no personal data and is not used to track you. | 1 year, or until you clear it | Preference, first-party. Scripts can read it (that is how the page applies your choice); it is sent only over HTTPS. |
Because the service cannot work without the sign-in cookie, it does not need your consent. If you block it, you cannot sign in. The language cookie only remembers a choice you make on the page.
Storage on your device
The site keeps a few small choices in your browser's storage (not cookies). They are not used to track you, and none of it is an advertising or analytics identifier. The table lists every item. Your lesson progress is saved only in your account on our server, not in your browser.
| Name | Purpose | How long | Removed at sign-out? |
|---|---|---|---|
masar-lang | Your language choice (English or Arabic) if you use the EN | ع switch in the header. Local storage (the same choice is also kept in the masar_lang cookie above). | Until you clear it or change the choice. | No, so the page keeps your language |
masar-theme | Your light or dark display choice, if you use the theme switch in the header. Local storage. | Until you clear it or change the choice. | No, so the page keeps your display choice |
masar.ret | The page you were opening when you were sent to sign in, so you land there afterwards. Session storage. | Until you sign in, or 12 hours, or you close the tab. | Yes |
masar.reveal.v1 | A note that the short opening animation of the brand mark has been shown. Session storage. | Until you close the tab. | Not applicable |
When you sign out, the site removes everything in the table marked Yes. Session storage is cleared when you close the tab. To remove everything, clear this site's data in your browser settings.
Other sites
The font the site uses (Readex Pro) is served from our own site: no other site receives a request when it loads, and it sets no cookie.
Lesson videos are YouTube videos. Nothing is loaded from YouTube until you press play on a lesson page; then the video plays from youtube-nocookie.com, YouTube's privacy-enhanced mode, which may store its own items in your browser under YouTube's privacy policy. If you do not press play, YouTube receives nothing.
On the waiting list form, the sign-up form and the contact form, Cloudflare Turnstile checks that a person, not a program, is using the form. It loads from Cloudflare and processes technical information from your browser (such as your IP address and browser characteristics) for that security check only, under Cloudflare's privacy policy. Cloudflare, which carries all traffic to our site, may also set its own strictly necessary security cookie when it needs to tell people from automated traffic. Neither is used for advertising or to follow you across sites.
If we ever add a cookie that is not strictly necessary, we will update this notice and ask for your consent first.
Questions: [email protected].