How we use cookies

Cookies are small text files stored on your device when you visit a website. They let us remember that you're signed in, that you've agreed to our terms, and which courses you're partway through. Without them, you'd have to sign in on every page.

Where we use third-party services (payments, analytics, email delivery), those services may also set cookies on their own infrastructure. We list each of them below.

These cookies are required for the platform to work. You cannot disable them without breaking sign-in, checkout, and course progress.

• Authentication session. A secure token that proves you're signed in. Set by NextAuth. Expires when you sign out or after 30 days of inactivity.
• CSRF token. Prevents cross-site request forgery on sign-in and payment forms.
• Locale preference. Remembers your language and region choice across visits.

We use privacy-first analytics that measure page views and sign-up funnel completion without tracking you across other websites. No third-party advertising cookies are set.

• Anonymous session ID. Groups page views within a single visit so we can see which onboarding steps are confusing. No personal data attached.

The following services may set cookies when you interact with relevant pages:

• PayPal. Payment processing. Only set on checkout pages after you click Pay.
• Resend. Transactional email delivery (receipts, password resets). No cookies set on your browser by Resend itself.
• Vercel. Our hosting infrastructure. Sets minimal functional cookies to route requests correctly.

You can block or delete cookies in your browser settings. Every major browser (Chrome, Safari, Firefox, Edge) lets you clear cookies for an individual site. If you block strictly-necessary cookies you won't be able to sign in.

We don't use cross-site advertising trackers, so there's no "opt out" to toggle — there's nothing to opt out of. If that changes in the future we'll add a proper preference centre and notify you in advance.