Cookie policy
Working draft 0.1 for legal review, not yet in force. Open points are marked [TO CONFIRM].
This page explains what Brotelo stores on your device and why.
The short version
- We only store on your device what Brotelo needs to work: keeping you signed in, remembering your settings, keeping a child's profile open after the PIN, and protecting the site against attacks.
- We use no analytics cookies, no advertising cookies and no social media trackers, and we do not follow you on other websites.
- Because everything we store is strictly necessary, we do not need your consent and we do not show a cookie banner. [TO CONFIRM: that no consent is needed in each target country.]
What cookies and similar technologies are
Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage, session storage and IndexedDB, keep information on your device in a similar way. In this policy, "cookies" covers all of them.
The law (Article 5(3) of the ePrivacy Directive, the national laws that apply it and, in the United Kingdom, PECR) allows a website to store information on your device without consent only when it is strictly necessary for a service you asked for. We use only such storage.
What we store on your device
[TO CONFIRM: the exact names, types and lifetimes once the app is built; this table lists what is planned. Today the language comes from the web address and no language cookie is set.]
| What | Set by | Why it is needed | How long |
|---|---|---|---|
| Sign-in session | Brotelo, through Firebase Authentication (Google) | Keeps you signed in to the parent area and protects your account | Until you sign out |
| Language and currency preference | Brotelo | Remembers the language and currency you chose | 12 months |
| Child profile session | Brotelo | After the PIN, keeps the child's profile open on this device | Until the child leaves the profile or the browser is closed |
| Cart | Brotelo | Keeps the courses you put in your cart | Until you order or empty the cart |
__cf_bm |
Cloudflare | Tells people from bots and protects the site against automated attacks | 30 minutes |
cf_clearance |
Cloudflare | Remembers that your browser passed a security check, only when such a check is shown | 30 minutes by default |
| Payment page cookies | MAIB, on its own payment page | Process your card payment securely and prevent fraud | Set by MAIB, see its cookie policy |
| Google sign-in cookies | Google, on its own pages | Only if you choose to sign in with Google | Set by Google, see its policies |
What we do not use
- No analytics cookies.
- No advertising cookies or ad trackers.
- No social media pixels or buttons that track you.
- No fingerprinting or other ways to recognise your device for tracking.
- In the children's area, nothing beyond the sign-in session and the child profile session.
Statistics without cookies
To know which pages are useful, we count visits with Plausible Analytics, a tool that uses no cookies and stores nothing on your device. It counts visits in aggregate, does not keep IP addresses and does not follow anyone across websites. It runs only on public pages and in the parent area, never in the children's area. [TO CONFIRM: self-hosted Plausible or Plausible Cloud.]
How to clear or block cookies
You can delete or block cookies in your browser settings, usually under "Privacy" or "Site data". Signing out ends your sign-in session, and closing the browser ends the child profile session.
If you block strictly necessary storage, parts of Brotelo will not work, for example signing in, opening a child profile or paying.
Changes to this policy
If we ever want to store something that is not strictly necessary, we will ask for your consent first and update this page.
Contact
Questions about this policy: [email protected].