Cookie Policy

1. What cookies are

Cookies are small text files placed on your device when you visit a website. Similar technologies — local storage, session storage and pixel tags — work in much the same way. They let a site remember you between requests, keep you signed in, and measure how features are used.

2. Categories we use

Strictly necessary

Required for the site to work. These cannot be turned off without breaking core features such as logging in, completing checkout, or submitting an exam answer. Examples:

• sb-access-token, sb-refresh-token — Supabase Auth session.
• __Host-csrf — protection against cross-site request forgery on form submissions.
• Stripe session cookies during checkout.

Functional

Remember your preferences (locale, theme, last-used dashboard tab) so you don't have to set them on every visit. They are not used for marketing.

Analytics

Aggregate, anonymised usage data that helps us understand which pages and features are useful. We currently use Vercel Analytics (privacy-friendly, no cross-site tracking) and PostHog for product analytics. You can opt out via the cookie banner; the site keeps working without them.

Marketing

We do not use third-party advertising or retargeting cookies on this site at the time of writing. If we add any in the future, this policy and the consent banner will be updated first, and we will only set them after you opt in.

3. Managing your choices

You can change your preferences at any time using the "Cookie settings" link in the footer, or by clearing the consent banner's saved choice in your browser. Most browsers also let you block or delete cookies — be aware that strictly-necessary cookies are required for login and checkout to work.

• Chrome
• Firefox
• Safari
• Microsoft Edge

4. How long cookies last

Session cookies expire when you close the browser. Persistent cookies last anywhere from a few days to a year depending on purpose; auth tokens are short-lived and refreshed automatically.

5. Updates

We update this policy whenever we change the set of cookies we use. The "last updated" date at the top reflects the most recent revision. Significant changes will trigger a fresh consent prompt.

6. Contact

For questions about this policy, please reach out via the contact page.