Legal
Cookie Policy
Effective: July 27, 2026
1. What this policy covers
This policy explains everything Spell It Now stores on your device, and every cookie that can reach your browser through this site. Spell It Now is operated by Mikasa Labs LLC, a California limited liability company. It sits alongside our Privacy Policy, which covers information more broadly.
"Cookies" is the word everyone uses, but it is only half the story here. Mikasa Labs LLC's own code sets no cookies; Google's tags can set cookies on the spellitnow.com domain, and those are listed in section 3. What our own code uses is localStorage, a place your browser sets aside for a site to keep small amounts of data on your own machine. The legal rules are the same either way, so both are covered below.
2. What Mikasa Labs LLC stores on your device
Seven items, all first-party localStorage, all written and read only by code running in your browser. None of them is ever transmitted to us, and none contains a login, account, or advertising identifier. Our code reads them in your browser to make the site behave the way you asked; the values never reach us. The one exception is your consent choice, which determines the consent signal we send to Google.
| Name | Purpose | Category | Lifetime |
|---|---|---|---|
theme |
Remembers whether you chose the light (HUD DAY) or dark (HUD NIGHT) appearance, so the page does not flash the wrong one when it loads. | Preference | Until you clear it |
spellitnow-alphabet |
Remembers which spelling alphabet you selected (NATO, German DIN 5009, and so on). | Preference | Until you clear it |
spellitnow-consent |
Records the privacy choices you made in the banner, and which version of our policies you made them against. Without it we would have to ask you on every page. | Strictly necessary | Until you clear it, or until our policies change materially |
spellitnow-analytics-consent |
A consent choice saved by an older version of this site. It is read once, carried over into the item above, and then deleted. | Strictly necessary | Deleted the first time you save a choice |
spellitnow-progress |
Your practice results: how many sessions you have done, your accuracy on each letter, your streak and last practice date, which alphabets you have used, which achievements you have earned, and when the record was created and last updated. | Feature you asked for | Until you clear it |
spellitnow-speed-records |
Your best times in the speed challenge. | Feature you asked for | Until you clear it |
spellitnow-speed-runs |
Your three fastest speed challenge runs, with the date, difficulty, and error count for each. Slower runs are not kept: a faster run pushes the slowest one out. | Feature you asked for | Until you clear it, or until three faster runs replace it |
Mikasa Labs LLC treats each of these as either strictly necessary to provide the site or as part of a feature you explicitly asked for by choosing a theme, choosing an alphabet, or running a drill, and so does not ask for your consent to them. They keep working normally if you decline everything optional.
3. Third-party cookies
Everything in this section involves Google. Depending on where you are, the receiving entity is Google LLC or Google Ireland Limited. Google also hosts this site through Firebase Hosting and receives your IP address, user agent, and the page address with every request, whatever you choose in the banner; see the Privacy Policy.
The cookies Google's scripts can place are:
| Cookie | Set by | Purpose | Typical lifetime |
|---|---|---|---|
_ga |
Google Analytics, on this domain, only with your consent | Recognises a returning browser so visits can be counted | 2 years |
_ga_<stream> |
Google Analytics, on this domain, only with your consent | Keeps session state for the analytics property | 2 years |
__gads, __gpi |
Google AdSense | Ad measurement and frequency capping. Not set while advertising storage is denied | 13 months |
Lifetimes are Google's published defaults and are set by Google, not by us. Google's own list is at Google's cookie notice.
If you allow analytics, Google's SDK also creates two IndexedDB stores on this domain,
firebase-installations-database and firebase-heartbeat-database, holding
an installation identifier and SDK usage counters. Clearing your browser's site data removes these
too.
Google AdSense
Every page of the site loads Google's AdSense library. We do not currently place ad units on this site - the script is present because Google requires it in order to review and verify a site for its advertising program, and our application is pending.
Before that script runs, we send Google a Consent Mode signal. Unless you have already allowed something, it sets advertising storage, advertising personalization, ad user data, and analytics storage to denied, and functionality storage and security storage to granted. Google states that with advertising storage denied it will not set new cookies for advertising purposes, and will not use previously set google.com and doubleclick.net cookies except for spam and fraud purposes. We cannot independently verify what happens inside Google's tag.
The three advertising signals are raised only if you allow advertising in the banner; the analytics signal is raised only if you allow analytics.
Be aware of one thing we cannot prevent: because your browser has to fetch the script from a Google server for it to exist at all, Google receives your IP address, your browser's user agent and the address of the page you are on. That happens on every page whatever you choose in the banner. We would rather tell you than pretend otherwise. Google explains its advertising cookies at Google advertising technologies.
Google Analytics (Firebase Analytics)
Only if you allow analytics, and only on the converter at spellitnow.com. It is not loaded on the About, Contact, legal or Learn pages at all. When it does run, Google sets identifiers used to recognize a returning browser and to measure how the site is used. Details are in Firebase Privacy and Security and the Google Privacy Policy.
Fonts are no longer a third party
The typefaces this site uses are served from spellitnow.com. No font request goes to a third party, and Google receives nothing from them.
4. Why there is a banner at all
Worth saying plainly: the consent banner on this site exists because of the two Google tags described above, not because of anything we store on your own device. Four of the seven items in section 2 are clearly outside the consent requirement; the three practice and speed items we treat as part of a feature you explicitly asked for. If we ever stop using Google's advertising and analytics, the banner question would turn on those three alone.
The banner gives you a genuine choice. "Only necessary" is exactly as easy to click as "Accept all", nothing optional is switched on in advance, and you can change your mind at any time without penalty.
5. Global Privacy Control and Do Not Track
We honor Global Privacy Control. If your browser sends the GPC signal, we set analytics and advertising to denied on every page automatically and record that refusal, so the consent banner does not appear and you are not asked again. You do not have to interact with the banner at all. If you open Preferences in the footer you will see a note explaining that GPC is active, and the "Accept all" button disabled so your signal cannot be overridden by accident.
We do not act on "Do Not Track." That signal has no agreed meaning and no agreed behavior, so honoring it would tell you nothing reliable. GPC is the one that works.
6. How to change or remove what is stored
- Change your choices: use the Preferences button in the footer of any page on this site.
- Refuse everything optional in advance: turn on Global Privacy Control in your browser or install an extension that sends it.
- Delete everything stored on your device: clear site data for spellitnow.com in your browser settings. This erases your theme, alphabet, consent record, practice progress, achievements and speed results. We cannot do this for you, because we cannot reach it.
- Delete individual items: your browser's developer tools let you remove single localStorage keys by name if you want to keep some and not others.
- Block Google entirely: a content blocker will stop the AdSense and Analytics scripts from loading. The converter, decoder, practice drills and speed challenge all work normally with them blocked.
7. Changes to this policy
If we add, remove, or change what is stored, we will update this page and its effective date. If the change is material we will also reset the privacy banner, so you are asked again rather than having an old choice applied to something you never agreed to.
8. Contact
Questions about anything on this page: hello@spellitnow.com.