Cookie Policy

Our cookie policy and how we use them

This policy explains the cookies and similar technologies we use on APC Pathway Pro, why we use them, and how you can control them.

The short version: we set only the cookies needed to keep you signed in, take payments securely and stop automated abuse. We run no advertising or third-party analytics.

01

What cookies are

A cookie is a small text file that a website stores on your device. It lets the site recognise your browser between requests — for example, to remember that you have signed in.

Cookies set by the site you are visiting are called first-party cookies. Cookies set by another organisation whose service appears on the page are third-party cookies. Session cookies are deleted when you close your browser, while persistent cookies stay until they expire or you delete them.

02

Our approach

The rules on cookies in the UK come from the Privacy and Electronic Communications Regulations 2003, known as PECR, read together with the UK GDPR. PECR requires us to tell you about the cookies we use and, for anything that is not strictly necessary, to get your consent before we set it.

We only set strictly necessary cookies

APC Pathway Pro does not use advertising cookies, tracking pixels or third-party analytics. Every cookie described below is needed to sign you in, take a payment securely, protect our forms from abuse, or remember a preference you have set. We do not build advertising profiles and we do not share cookie data with advertisers.

03

The cookies we use

Essential — signing in and using your account

CookieSet byPurposeExpires
sb-<project>-auth-tokenSupabase (first party)Stores your authentication session so you stay signed in as you move between pagesUp to 1 year, refreshed as you use the service
sb-<project>-auth-token-code-verifierSupabase (first party)Secures the sign-in and email-link flow against interceptionA few minutes, during sign-in only
sidebar_stateAPC Pathway Pro (first party)Remembers whether you had the application sidebar expanded or collapsed7 days

Essential — taking payments securely

These are set by Stripe when you visit a page with a payment form or go through checkout. They help Stripe detect fraudulent card use. They are not set if you never start a payment.

CookieSet byPurposeExpires
__stripe_midStripe (third party)Fraud prevention — identifies the device across payment attempts1 year
__stripe_sidStripe (third party)Fraud prevention — identifies the current payment session30 minutes

Essential — protecting our forms from abuse

Where bot protection is enabled on a form such as sign-up or contact, we use Cloudflare Turnstile. It sets cookies to tell humans from automated traffic.

CookieSet byPurposeExpires
__cf_bmCloudflare (third party)Distinguishes bots from human visitors to protect our forms30 minutes
cf_clearanceCloudflare (third party)Records that a challenge was passed, so you are not repeatedly challengedUp to 1 year

Cookie names and lifetimes are set by these providers and can change. If you notice a cookie on our site that is not described here, please tell us at hello@apcpathwaypro.app and we will investigate and update this page.

04

Local storage and similar technologies

As well as cookies, we store a small amount of information in your browser's local storage. This is not sent to our servers and is used only to remember your preferences on your device.

ItemPurpose
themeRemembers whether you prefer the light or dark appearance
cookie_consent_statusRemembers your response to our cookie notice so we do not ask again

You can clear local storage at any time through your browser's settings for clearing site data.

05

Analytics and advertising

We do not currently use any third-party analytics or advertising service. We understand how the service is being used from our own server logs, which are described in our Privacy Policy.

If we introduce analytics in future, it will only load where you have given consent through our cookie notice, we will update this page before it goes live, and you will be able to withdraw your consent at any time.

06

Your choices

When you first visit the site we show a short cookie notice and record your response so that we do not ask again.

What accepting or rejecting actually does

Because everything we currently set is strictly necessary, it is exempt from the consent requirement under regulation 6(4) of PECR and cannot be switched off without breaking sign-in, payments or protection against abuse. Your choice is therefore recorded for the future: it governs whether we may set any non-essential cookie, such as analytics, if we add one. We would rather tell you this plainly than imply a control that does not yet do anything.

You can also control cookies through your browser, including blocking them or deleting those already stored. Bear in mind that blocking essential cookies will stop you being able to sign in or pay. Guidance for the common browsers is available here:

We honour Global Privacy Control and Do Not Track signals to the extent that they are relevant — since we set no tracking cookies, there is nothing for them to disable.

07

Changes to this policy

We will update this page whenever we add, remove or change a cookie, and the date it was last updated is shown alongside the contents. Where a change involves a non-essential cookie, we will ask for your consent before setting it.

08

Contact us

If you have any questions about how we use cookies, email hello@apcpathwaypro.app or use our contact page. You can also read our Privacy Policy for the wider picture of how we handle your personal data, and our Terms of Service.