Cookie Policy

Last updated: 12 May 2026

This Cookie Policy explains how Acumen Logic Ltd uses cookies and similar storage technologies on acumenlogic.co.uk and the platform at app.acumenlogic.co.uk. It is written to comply with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR. It should be read alongside our Privacy Policy.

1. What we mean by “cookies and similar storage”

“Cookies” are small text files placed on your device by a website you visit. We also use the browser’s localStorage for a small amount of functional state (such as remembering your accessibility preferences). Throughout this policy “cookies” covers both, unless we explicitly call out which is which.

2. The two categories we use

Essential (always on, no consent required under PECR reg. 6(4))

Strictly necessary to deliver the Service you have asked for. We cannot turn these off and you cannot disable them in our cookie banner. They include:

  • Authentication — keeping you signed in to the platform.
  • Storing your cookie‑consent decision so we don’t ask again.
  • Storing accessibility preferences (e.g. larger text, reduced motion) you have explicitly chosen.
  • Security — rate limiting and protecting against abuse.

Analytics (off by default, on only with your consent)

Help us understand how visitors and users interact with the Service so we can improve it. Loaded only after you accept analytics in the cookie banner. Includes Google Analytics, PostHog product analytics and Sentry session replay / performance traces.

A separate, related point: your in‑platform performance analytics — the Pro feature that tracks your scores, drill mastery and trends over time — is first‑party application data we hold against your account. It is governed by the Privacy Policy, not this Cookie Policy. It is unaffected by your cookie choices because it is not a cookie or third‑party tracker.

If you receive emails from us about products, lessons or promotions, that’s a separate email marketing preference handled at sign‑up and in Settings → Notifications. It does not involve cookies and is not controlled by the cookie banner.

3. The cookies and storage we actually set

Name Type Category Purpose Duration
al_cookie_consentCookie + localStorageEssentialYour cookie‑consent decision. Set as a dot‑domain cookie so the same decision applies on both acumenlogic.co.uk and app.acumenlogic.co.uk.1 year
sb-*CookieEssentialSupabase authentication cookies that keep you signed in to the platform.Session / refresh‑token lifetime
al_a11y_prefs_v1localStorageEssentialStores accessibility preferences you have chosen (text size, reduced motion).Until cleared
al_user_cachelocalStorageEssentialShort‑lived cache of your account name and tier, to avoid an extra round‑trip on each page load.Up to 1 hour
al_dashboard_resume_dismissed_v1localStorageEssentialRemembers that you have dismissed the “resume your in‑progress assessment” card on the dashboard.Until cleared
al_help_sidebar_collapsedlocalStorageEssentialRemembers whether the Help sidebar is expanded or collapsed.Until cleared
al_verification_dismissedlocalStorageEssentialHides the “please verify your email” banner if you have dismissed it.Until verified
themelocalStorageEssentialRemembers light/dark theme preference.Until cleared
stayLoggedInlocalStorageEssentialRecords your “keep me signed in” choice at login.Until cleared
_ga, _gidCookieAnalyticsGoogle Analytics — aggregated traffic measurement. Loaded only with consent.2 years / 24 hours
ph_*CookieAnalyticsPostHog — product analytics. Loaded only with consent.1 year
sentryReplaySession / sentryReplayIdsessionStorageAnalyticsSentry session replay / performance traces. Loaded only with consent.Browser session

Stripe sets its own essential cookies on the checkout page it hosts, governed by the Stripe Cookie Policy. We do not control or read those cookies.

4. How we ask for and record your consent

  • The cookie banner appears the first time you visit either site (or after a year, when we ask again as a refresh).
  • Analytics cookies are off by default. They only load if you click Accept all. We do not treat continued use of the site as consent.
  • The banner gives you two clearly-presented choices, shown side-by-side: Accept all or Reject all. Each is a single click. Reject all leaves only strictly-necessary essential cookies running — no analytics, no third-party tags.
  • Your decision is mirrored across both sites via the al_cookie_consent dot‑domain cookie, so you don’t have to choose twice.
  • We also send a copy of your decision to our server with the time and your account ID (if signed in) so we have an audit trail.

5. Changing or withdrawing your consent

You can change your cookie choices at any time by clicking Cookie settings in the footer of either site, or by clearing the al_cookie_consent cookie / localStorage entry — the banner will then re‑appear. Your browser also lets you delete or block cookies entirely; doing so may stop you signing in or break specific features.

6. Cookies set by third parties

The following third‑party services may set cookies if you accept the relevant category:

For Stripe (payments) and Resend (transactional email beacons in messages we send you), please see their respective privacy notices linked in our Privacy Policy.

7. Do Not Track and Global Privacy Control

Where your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to disable the Analytics category until you explicitly opt back in. We do not act on the older Do Not Track header because there is no settled UK standard for it.

8. Updates to this policy

If we add, remove or change a cookie, we will update the table above and refresh the “last updated” date. Material changes — for example, the introduction of a new category — will trigger a fresh consent banner.

9. Contact