Related policies: Privacy · Cookies · Terms · Disclaimer · Copyright · Editorial policy
Necessary cookies
cssv_session is the secure, HTTP-only sign-in session cookie and cssv_csrf is the CSRF protection cookie used to protect signed-in requests. They are first-party cookies, are essential to authenticated account operation, use Secure and SameSite=Lax settings, and are issued for up to 14 days. cssv_admin_mfa is an HTTP-only first-party cookie used for short-lived administrator verification, currently up to 12 hours. Necessary cookies are not used by CSS Vista for advertising personalization.
Functional browser storage
CSS Vista uses first-party browser local storage for local-first study state under cssvista:v1. It can contain quiz and mock results, answers, bookmarks, study plans, streaks, tasks, notes and related progress. Session storage is used for temporary navigation restoration and short-lived interface/security state such as password-reset request timing. These technologies are functional to the study experience and can be deleted through your browser's site-data controls; deleting them may remove unsynced guest progress.
Advertising cookies and identifiers
Eligible substantial public content pages and the limited manual account overview placements described in the Privacy Policy can load Google AdSense. Private account routes never enable Auto Ads or vignettes, and active assessment and credential pages remain ad-free. Google and its advertising partners may place or read cookies, use web beacons, IP addresses or similar identifiers for ad delivery, measurement, fraud prevention and, where permitted by the user's choices and applicable rules, personalization. These are third-party advertising technologies controlled by the relevant provider rather than CSS Vista's first-party session system. Their exact names and lifetimes can change as Google updates its services, so this policy does not invent a fixed cookie-name list.
Analytics
No Google Analytics or Google Tag Manager implementation was found in the audited application source at this update. CSS Vista therefore does not list fabricated analytics cookie names. If a dedicated analytics service is enabled later, this page and the applicable consent configuration must be updated.
Last updated: 12 September 2026