iNSTAiNSTRU Cookie Policy
Policy version 2.3 ยท Last updated: October 22, 2026
Overview
INSTAINSTRU LLC, a New York limited liability company doing business as iNSTAiNSTRU ("iNSTAiNSTRU"), uses cookies, browser storage, and similar technologies to operate the web Platform, keep Users signed in, remember preferences, prevent fraud, process payments, measure product usage, and diagnose reliability issues.
iNSTAiNSTRU does not use third-party advertising, ad networks, or cross-site tracking technologies.
For how we handle Personal Information generally, see our Privacy Policy.
Cookies and Browser Storage
Cookies are small files stored by your browser. Local storage and session storage are browser storage areas used for similar operational purposes. Some technologies are set by iNSTAiNSTRU and some are set by service providers when their components load on our pages.
How We Use These Technologies
- Authentication and security: to keep you signed in, refresh sessions, prevent cross-site request forgery, detect suspicious activity, and protect accounts.
- Guest and preference state: to support guest search sessions, recent searches, navigation context, launch or beta banners, and user preferences.
- Payments and fraud prevention: Stripe.js and Stripe Elements may set cookies such as __stripe_mid and __stripe_sid when payment forms or fraud-prevention features load.
- Analytics and performance: PostHog, Vercel Analytics, Vercel Speed Insights, Sentry, and Axiom may process technical and usage data to help us understand product usage, performance, and errors. PostHog session replay records how visitors who are not signed in use our public home, search, service, and instructor pages, with everything they type masked. We do not record visits from browsers that send a Global Privacy Control or Do Not Track signal. Sentry replay may process masked, error-triggered session replay data.
- Maps and location features: Google Maps and browser location APIs may be used when you interact with map/location features.
Your Choices and Managing Cookies
Most browsers let you block or delete cookies and browser storage. If you block strictly necessary cookies, parts of the Platform may not work, including login, checkout, account security, or payment forms.
Browser privacy controls may affect cookies and browser storage. We do not currently respond to browser 'Do Not Track' signals, except that we do not record session replays of visits from browsers that send a Global Privacy Control or Do Not Track signal.
Changes to this Cookie Policy
We may update this Cookie Policy as the Platform's technologies change. The "Last updated" date shows the current version.
Contacting Us
If you have questions about this Cookie Policy, contact privacy@instainstru.com.
Exhibit A
| Technology | Purpose | Provider |
|---|---|---|
| Session cookies: sid, sid_preview, rid, rid_preview, __Host-* variants | Strictly necessary authentication, session refresh, account security, and CSRF protection. | iNSTAiNSTRU |
| Guest cookie: guest_id | Guest search/session continuity before login. | iNSTAiNSTRU |
| Local storage: guest_session_id, guest_session_expiry, guest_bootstrap_done, user_pref_* | Guest search continuity and user preference state. | iNSTAiNSTRU |
| Session storage: recentSearches, navigationFrom, background-variants, beta_banner_dismissed | Recent search display, navigation state, visual preference state, and temporary banner state. | iNSTAiNSTRU |
| Local storage: replay_stopped_session | Remembers that session replay is stopped for the current session so it does not run in that session. | iNSTAiNSTRU |
| PostHog storage and ph_* identifiers | Product analytics using explicit events and manual pageviews, and session replay of public pages for visitors who are not signed in, with typed text masked. | PostHog |
| __stripe_mid, __stripe_sid, and Stripe.js storage | Payment form operation, fraud prevention, and payment-security signals when Stripe Elements or Stripe.js loads. | Stripe |
| Sentry cookies/storage if set by SDK | Error reporting, diagnostics, and masked, error-triggered session replay. | Sentry |
| Vercel Analytics and Speed Insights identifiers | Aggregate site performance and usage measurement. | Vercel |
| Map and location feature storage | Map rendering, place/location interaction, and location feature operation when used. | Google Maps / browser APIs |
| Cloudflare Turnstile challenge tokens and cookies | Bot protection on the login page, verified server-side before sign-in. | Cloudflare |
| Vercel BotID signals and cookies: KP_UIDz, KP_UIDz-ssn | Strictly necessary security: bot management for Platform requests. Each cookie expires 24 hours after it was last set. | Vercel |
| 100ms browser storage | Device and room state for live video lessons when the video room loads. | 100ms |
Need clarification?
Our team is happy to help. Email legal@instainstru.com and we will respond within two business days.