PoliPrep Cookie Policy

This Cookie Policy explains how PoliPrep uses cookies and similar technologies when you visit or use the PoliPrep website at https://poliprep.com (the "Service").

It explains which cookies and similar technologies are currently used on the website and in user accounts, why they are used, and how you can manage your choices.

This Cookie Policy should be read together with our Privacy Policy and Terms of Service.

This Policy describes the technologies currently implemented on PoliPrep. Services that are planned but not yet integrated into the website are not described as current technologies in this Policy.

The Data Controller responsible for the processing described in this Cookie Policy is:

Islam Fakrul, Ditta Individuale

Via Belmonte 6

10155 Turin (TO)

Italy

P. IVA: 13489590011

Email: support@poliprep.com

For more information about the processing of personal data, please see our Privacy Policy.

Cookies are small text files that a website may store on your device when you visit it.

PoliPrep may also use technologies that perform functions similar to cookies, including: local storage; session storage;; similar browser-based identifiers.

For simplicity, this Policy refers collectively to cookies and these similar technologies as "cookies and similar technologies", unless a distinction is relevant.

Cookies may be:

• First-party, meaning they are set by PoliPrep's website;
• Third-party, meaning they are associated with a service provided by another company;
• Session-based, meaning they are generally removed when the browser session ends; or
• Persistent, meaning they remain until they expire or are removed by the user or browser.

PoliPrep currently uses cookies and similar technologies for two main purposes:

3.1 Necessary functionality

Some technologies are used to provide functionality that you have explicitly requested, such as remembering your selected language or recording your cookie-consent choice.

These technologies do not require consent where they are strictly necessary for the requested functionality.

3.2 Analytics

PoliPrep uses PostHog to understand how visitors use the website and to improve the Service.

PostHog analytics are activated only after you actively consent to analytics through the cookie-consent mechanism.

Before consent, PoliPrep does not initialize PostHog or send analytics requests.

The following technologies are currently used on the website.

4.1 Language Preference Cookie

locale — Purpose: Remembers the language selected by the visitor (English or Italian); Type: First-party cookie; Duration: 365 days; Provider: PoliPrep; Consent: No

The locale cookie is created only when the visitor actively changes the language using the language selector.

It is used solely to remember the language preference requested by the visitor and does not contain analytics or advertising information.

4.2 Cookie-Consent Storage

poliprep-cookie-consent — Storage: localStorage; Purpose: Records whether the visitor accepted or rejected analytics; Duration: Until cleared by the browser/user; Provider: PoliPrep; Consent: No

poliprep-cookie-consent-date — Storage: localStorage; Purpose: Records the date of the choice, so we can ask again after 6 months; Duration: Until cleared by the browser/user; Provider: PoliPrep; Consent: No

poliprep-cookie-consent-version — Storage: localStorage; Purpose: Records the version of the consent request, so we can ask again if our use of cookies changes; Duration: Until cleared by the browser/user; Provider: PoliPrep; Consent: No

This storage is necessary to remember the visitor's consent choice and prevent non-essential analytics from being initialized contrary to that choice.

It is not itself used for analytics or advertising.

4.3 Sign-in Storage

sb-<project>-auth-token — Storage: localStorage; Purpose: Keeps you signed in to your PoliPrep account and renews your session securely; Duration: Until you sign out; Provider: PoliPrep (authentication provided by our hosting platform, Lovable Cloud); Consent: No

This storage is created only when you sign in or sign up. It is not used for analytics or advertising.

4.4 Hosting Security Cookies

Our hosting infrastructure (Cloudflare) may set security cookies, such as __cf_bm, to protect the website against bots and abuse. They are strictly necessary, do not require consent and usually expire within 30 minutes.

4.5 PostHog Analytics

PoliPrep currently uses PostHog for website analytics.

PostHog is configured to use its EU-hosted endpoint:

https://eu.i.posthog.com

PostHog is initialized only after the visitor accepts analytics through the cookie-consent mechanism.

PostHog may use the following browser storage:

ph_phc_<projectkey>_posthog — Storage: Cookie; Purpose: Stores a pseudonymous PostHog device identifier and session-related state; Duration: Approximately 365 days, subject to PostHog configuration; Consent: Yes

ph_phc_<projectkey>_posthog — Storage: localStorage; Purpose: Stores PostHog analytics state, identifier and configuration; Duration: Until cleared; Consent: Yes

PostHog session/window storage, including _window_id, _primary_window_exists, and _session_registered_properties — Storage: sessionStorage; Purpose: Supports session and browser-window tracking; Duration: Browser session; Consent: Yes

Other PostHog keys starting with ph_ (for example for session recording and feature settings) — Storage: localStorage / sessionStorage; Purpose: Support session recording and PostHog feature settings; Duration: Until cleared, or browser session; Consent: Yes

The exact PostHog cookie name includes the project's PostHog key and may therefore vary.

PostHog may process pseudonymous identifiers such as a randomly generated device or session identifier. PoliPrep does not use email addresses or names as PostHog event properties.

Analytics purposes

Analytics may include: page-view measurement; understanding which features and pages are used; measuring interactions with waitlists, contact forms, course pages, simulations, articles, and FAQs; understanding user flows; monitoring website performance and web vitals;; improving the design, usability, and performance of the Service.

PostHog features

At the time this Policy was prepared, the PoliPrep PostHog project had the following features enabled or available for analytics processing after consent: product analytics; event tracking; autocapture; session recording (see "Session recording" below); heatmaps; dead-click capture; web-vitals monitoring;; surveys functionality.

These features are used only after the relevant analytics consent has been provided.

Session recording

If you accept analytics, PostHog may record how you use the website (pages, clicks, scrolling and on-screen layout) as a replay, together with technical browser console messages, to help us find errors and improve usability. Everything you type into forms (inputs, text areas and selections) is masked and never recorded. Personal details shown on screen in your account, such as your name, email and Settings pages, are hidden from recordings. The admin area is never recorded or tracked.

PoliPrep does not use PostHog for advertising campaigns or the sale of visitor data.

Important: PostHog configuration is part of our technical implementation and may change. This Policy will be updated where a change materially affects the categories or purposes of tracking used on the Service.

Analytics technologies are not activated when you first visit the Service.

Before you make a choice through the cookie banner: PostHog is not initialized; PostHog analytics requests are not sent; PostHog cookies are not created;; PostHog browser storage is not created.

The current consent banner provides the following choices: Accept all — enables analytics; Reject all — keeps analytics disabled. Both buttons have the same size and prominence.

Rejecting analytics does not prevent access to the PoliPrep website.

Your choice is remembered so that the banner is not shown again on every visit. In line with the Italian Data Protection Authority's cookie guidelines, PoliPrep will not ask for your consent again for at least 6 months, unless the technologies or purposes described in this Policy change materially or you clear your browser storage. You can change your choice at any time through Cookie Settings (see Section 6).

You may change or withdraw your analytics consent at any time.

PoliPrep provides a Cookie Settings control in the website footer and, if you have an account, the Settings → Privacy section. From either one you can reopen the consent interface and change your choice.

When you withdraw analytics consent: PoliPrep stops sending new analytics data to PostHog; PostHog is prevented from being initialized again unless you subsequently consent; PostHog cookies and browser storage are deleted from your browser;; your stored consent choice is updated accordingly.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Your ability to withdraw consent does not affect the use of technologies that are strictly necessary for the Service or for a functionality you have specifically requested.

Most modern browsers allow you to view, delete, block, or otherwise manage cookies and browser storage.

You can find instructions for common browsers here:

Chrome:

https://support.google.com/chrome/answer/95647

Firefox:

https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Safari:

https://support.apple.com/guide/safari/manage-cookies-sfri11471

Microsoft Edge:

https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge

Disabling certain necessary browser storage may affect some website functionality.

Browser controls do not necessarily replace the PoliPrep consent mechanism, because our consent system is designed to record your specific choice regarding non-essential analytics.

Some browsers provide a "Do Not Track" setting.

There is currently no generally applicable technical standard requiring websites to respond to that signal in a particular way.

PoliPrep therefore currently responds to the choices made through its cookie-consent mechanism rather than treating a browser Do Not Track signal as a separate consent or objection mechanism.

Our analytics service is provided through PostHog.

PostHog's services and processing are also subject to PostHog's own terms and privacy documentation:

PostHog Privacy:

https://posthog.com/privacy

PoliPrep does not currently use advertising networks, advertising pixels, Google Analytics, Meta Pixel, TikTok Pixel, LinkedIn Insight Tag, or similar advertising trackers.

Website fonts are hosted on PoliPrep's own servers. Your browser does not connect to Google Fonts or other font providers.

Services planned for later versions of PoliPrep are not treated as current cookie providers in this Policy until they are actually integrated into the Service.

PoliPrep uses PostHog's EU-hosted analytics endpoint.

Where personal data processed through cookies or similar technologies is transferred outside the European Economic Area and such transfer requires a legal transfer mechanism, PoliPrep will rely on an applicable mechanism permitted under Chapter V of the GDPR, such as an adequacy decision or appropriate safeguards.

Further information about international data transfers is provided in the Privacy Policy.

The browser-side retention periods applicable to the technologies currently identified are described in Section 4.

Analytics information processed by PostHog may have a separate retention period on PostHog's systems. The applicable retention of personal data is described in the Privacy Policy.

When you reject or withdraw analytics consent, PoliPrep stops future analytics collection and deletes PostHog cookies and browser storage from your browser.

Where the processing of information obtained through cookies or similar technologies involves personal data, you may have rights under applicable data-protection law, including: the right to access your personal data; the right to request rectification; the right to request erasure; the right to request restriction of processing; the right to object to certain processing; the right to data portability where applicable;; the right to withdraw consent at any time where processing is based on consent.

You may exercise applicable rights by contacting:

support@poliprep.com

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

https://www.garanteprivacy.it

For further information about your rights and how PoliPrep processes personal data, see our Privacy Policy.

We may update this Cookie Policy when our use of cookies or similar technologies changes, when new services are introduced, or when applicable legal requirements change.

When changes materially affect the use of non-essential cookies or tracking technologies, PoliPrep will update the Policy and, where required, request new consent.

The "Last updated" date at the top of this Policy indicates when it was most recently revised.

Changes to this Policy do not themselves constitute consent to the use of cookies or similar technologies. Where consent is legally required, it will be obtained through the applicable consent mechanism.

For questions about this Cookie Policy or PoliPrep's use of cookies and similar technologies:

Islam Fakrul, Ditta Individuale

Via Belmonte 6

10155 Turin (TO)

Italy

Email: support@poliprep.com