Cookie Policy
Last Updated: October 28, 2026
Cookies at a Glance
- • Essential cookies keep you logged in and secure—these can't be disabled
- • Your theme and language are kept in your browser's local storage, not in cookies
- • Analytics cookies help us understand how you use the platform
- • We do not use advertising cookies
- • You can manage cookies in your browser settings
Table of Contents
This Cookie Policy explains how ScoreUp Pro uses cookies and similar tracking technologies on our platform at scoreup.pro. This policy should be read alongside our Privacy Policy. Privacy Policy.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help websites remember information about your visit, like your preferences and login status.
Types by Duration
- Session Cookies: Temporary—deleted when you close your browser
- Persistent Cookies: Remain on your device until they expire or you delete them
First-Party vs. Third-Party
- First-Party: Set by ScoreUp Pro directly
- Third-Party: Set by external services we use (e.g., PostHog, Stripe)
2. Why We Use Cookies
- Essential Functionality: Keep you logged in and protect your account
- Sign-in Security: Protect sign-in with Google and Apple against forged logins
- Analytics: Understand how users interact with our platform to improve it
- Security: Detect and prevent fraudulent activity
3. Types of Cookies We Use
Essential Cookies (Required)
These cookies are necessary for the platform to function. Without them, you cannot log in or use core features.
| Cookie | Purpose | Duration |
|---|---|---|
| authToken | Signs you in. A short-lived access token that scripts on the page cannot read. | 15 minutes |
| refreshToken | Keeps you signed in by renewing the access token. Scripts cannot read it. | 7 days |
| loggedIn | Tells public pages that you are signed in. It holds no credential. | 7 days |
| XSRF-TOKEN | Protects your requests against cross-site request forgery. | 1 hour |
| appleLoginState | Set only during Sign in with Apple: ties the sign-in to your browser so it cannot be forged. | 15 minutes |
| JSESSIONID | Set only during Sign in with Google: holds the sign-in request while you are on Google's page. | Until you close the browser |
Local Storage (Not Cookies)
A few settings are kept in your browser's local storage. They stay on your device, are not sent to us with your requests and are not used for tracking. They count as strictly necessary: each one only makes a setting you use on the site work (your theme, your language, your cookie decision), which is why the cookie banner does not ask about them.
| Stored item | Purpose | Duration |
|---|---|---|
| cookie_consent_v1 | Your cookie choices (the consent record), so the banner does not ask again | Until you clear your browser data |
| theme | Your choice of light or dark mode | Until you clear your browser data |
| i18nextLng, userSelectedLng | The site language you chose or your browser suggested | Until you clear your browser data |
Analytics Cookies
These help us understand how you use the platform so we can improve it. If you arrived through a creator's link and accept analytics cookies, we also keep that creator's code in your browser's local storage (under the key campaign_attribution_pending) for up to 30 days, to pre-fill it at checkout. We also keep how you first arrived (the link's campaign tags, the referring website's domain and your first page) under the key first_touch_pending for up to 30 days, so it can be stored on your account when you sign up.
| Cookie | Purpose | Provider |
|---|---|---|
| ph_*_posthog | Recognises your browser across visits for product analytics and session replays | PostHog |
| _ga | Distinguishes one visitor from another for usage statistics | Google Analytics 4 |
| _ga_* | Keeps the state of your current visit | Google Analytics 4 |
With your consent PostHog also records session replays: a reconstruction of what happened on the page, including the answers you type during an exam. Password, email and phone fields are masked. We use replays only to find and fix defects.
We do not use advertising or marketing cookies. If we add them in the future, we'll update this policy and request your consent.
4. Third-Party Cookies
We use services that may set their own cookies:
- PostHog: Product analytics to help us understand platform usage and improve features. PostHog Privacy Policy
- Google Analytics 4: Usage statistics for the website. Loaded only after you accept analytics cookies. Google Privacy Policy
- Google Authentication: Used when you sign in with Google. Google Privacy Policy
- Stripe: For payment processing and fraud prevention. Stripe Privacy Policy
5. Managing Cookies
Browser Settings
You can control cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Options → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Privacy → Cookies
Opt-Out Options
You can manage your cookie preferences at any time using the cookie consent banner. Click "Cookie Settings" in the footer of any page to change your choices.
6. What Happens If You Disable Cookies
Essential Cookies Disabled: You won't be able to log in or use the platform. The service will not function properly.
Local Storage Cleared: Your theme and language go back to their defaults, and the cookie banner asks for your choice again.
Analytics Cookies Disabled: No impact on your experience. We just won't be able to track usage to improve the platform.
7. Updates to This Policy
We may update this Cookie Policy to reflect changes in our practices or legal requirements. We'll notify you by updating the "Last Updated" date and, for material changes, by email or in-app notice.
8. Contact Us
Questions about our use of cookies?
Email: contact@scoreup.pro
Subject: "Cookie Policy Inquiry"
By continuing to use ScoreUp Pro, you acknowledge our use of cookies as described in this policy.