Cookie Policy

Our approach

We use the minimum necessary to run the service. Analytics is off until you explicitly accept it, and dismissing the consent banner without choosing leaves it off. There is no pre-ticked box and no consent implied by continuing to browse.

Strictly necessary

• Session cookie — identifies your signed-in session. httpOnly, SameSite=Lax, Secure in production. Required for sign-in, checkout and access to purchased material.
• CSRF and callback cookies — set during sign-in and OAuth flows to prevent request forgery. Required for secure authentication.
• cart/checkout linkage — a signed token held in the page URL during the sandbox checkout flow, not a cookie, and it expires within minutes.

Local storage

• "aiexamlab-theme" — remembers your light or dark theme choice.
• "aiexamlab-consent" — records your cookie decision, including when you made it, so we can prove consent and not ask repeatedly.

Analytics (opt-in)

If you accept analytics, we load either Plausible (privacy-focused, no cookies, no personal identifiers, aggregate only) or Google Analytics 4 with IP anonymisation, depending on configuration. Analytics tells us which pages and topics are useful; it is never used to build a profile for advertising, and it never includes your email address or order contents.

Third-party content

When you pay, the payment provider may set its own cookies on its own domains so it can process the payment and prevent fraud. Those are governed by the provider's own cookie policy, and we do not receive the data they hold.

Changing your choice

Use the cookie settings control below to change your decision at any time. You can also clear this site's cookies and storage in your browser settings, which resets your choice and deletes the stored preferences. Withdrawing analytics consent stops any further collection immediately.