Cookie Notice

We use as little browser storage as we can. This page lists what is stored and why.

1. Strictly necessary

• seclern_session: keeps you signed in. HttpOnly, SameSite=Lax, Secure outside localhost, up to 30 days. This does not need consent because the service cannot work without it.
• On-device study data: IndexedDB and a few localStorage keys hold progress, notes, settings, theme and the last certification you picked. It stays on your device unless you sign in, then it syncs only to your own account.

2. Analytics

• Cloudflare Web Analytics is cookieless and does not track you across sites.
• PostHog (EU region) is set up to run without cookies and without writing to localStorage.
• Sentry receives technical error reports. It does not set advertising cookies.

None of these use cookies or identify you across sites. In the UK, statistics-only storage like this is exempt from consent under the Data (Use and Access) Act 2025, so you are not asked. Visitors in the EU see a short consent prompt before product analytics starts, and the choice is stored on your device. Session recording stays off unless you turn it on. You can change the choice at any time in Settings or from the footer. If we ever add non-essential cookies, this page changes first and we ask for consent where the law requires.

3. Third parties

• Stripe may set cookies on its own hosted checkout page for fraud prevention and to complete payment. We do not control them. See Stripe's cookie policy.
• Cloudflare may set short-lived security cookies for bot management. They are not used for tracking.
• Fonts are served from our own domain.

4. Clearing what we store

Sign out from the account menu to end your session. Clear site data in your browser to remove local study data, or delete your account from Profile to remove the server copy too.

5. Changes

We update this page when our use of storage changes, and the date at the top shows the latest version. For more on personal data see the Privacy Policy.