Cookies · Governance draft
Cookie Information
This draft reflects the current application architecture: essential session cookies and limited browser storage support account security, learning continuity and the purchase journey. Any future analytics or advertising technology requires a fresh consent review.
Governance draft — not yet legally approved
This page is a structured launch draft for business and legal review. It describes the intended operating position without replacing statutory rights or professional legal advice. Items requiring a decision are listed at the end.
01
What cookies are
Cookies are small values a website asks a browser to retain. Related browser storage can hold limited information without being sent automatically with every request.
02
Essential session cookie
After sign-in, PRAGO uses an HTTP-only session cookie so the server can authenticate the learner and protect access to their account. It is designed with SameSite controls and is marked Secure in production. Disabling it prevents authenticated learning features from working.
03
Browser storage
The application uses local browser storage for limited continuity functions, including carrying a validated package selection between registration steps and caching progress display state. Authoritative entitlement and progress records remain server-side.
04
Analytics and advertising
No analytics or advertising cookie commitment is made by this draft. Before any non-essential technology is enabled, PRAGO must inventory it, determine whether consent is required and update both the interface and this information.
05
Managing storage
Browser settings can remove or block cookies and local storage. Doing so may sign the learner out, clear a remembered package selection or reduce continuity. Essential storage is used only where needed to provide or secure the requested service.
06
Changes and contact
A dated inventory of production cookie names, purposes and lifetimes must be approved before final publication. Questions may be sent to support@pragoai.co.uk.
Business / legal approval required before final publication
- Production inventory of cookie/storage names, lifetimes and exact purposes.
- Whether any non-essential analytics, marketing or third-party embeds will be enabled.
- Consent-management requirement for each launch jurisdiction.
- Final cookie banner/settings design if non-essential technology is introduced.
Draft version 0.1 · prepared 6 September 2026 · contact: support@pragoai.co.uk