Cookie Policy
Effective date: 5 August 2026
1. What Are Cookies
Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function efficiently and to provide information to the site operator. Similar technologies include local storage, session storage, and indexedDB — together referred to as “cookies” in this policy.
This Cookie Policy explains what cookies we use on atpltraining.io and its subdomain app.atpltraining.io (collectively, the “Website”), why we use them, and how you can manage your preferences. The ATPL Training iOS App does not use browser cookies; equivalent tracking in the App is governed by our Privacy Policy.
2. Legal Basis
Our use of cookies is governed by the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the ePrivacy Directive (Directive 2002/58/EC as amended by Directive 2009/136/EC), transposed into Estonian law through the Electronic Communications Act (Elektroonilise side seadus).
Under this legal framework:
- Strictly necessary cookies (essential for the Website to function) do not require your consent. Our use of these cookies is based on our legitimate interest in operating a secure and functional service (GDPR Art. 6(1)(f)) and the exemption under Art. 5(3) of the ePrivacy Directive.
- All other cookies — including functional preferences and analytics — are placed only after you provide consent through our cookie banner (GDPR Art. 6(1)(a) and Art. 5(3) ePrivacy Directive). You may withdraw your consent at any time.
3. Cookies We Use
3.1 Strictly Necessary Cookies
These cookies are essential for the Website to function and cannot be disabled. They are set in response to actions you take, such as logging in or setting privacy preferences.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Supabase | Authentication session — keeps you signed in | Session |
| sb-refresh-token | Supabase | Refreshes your session without re-login | 30 days |
| cookie-consent | ATPL Training | Stores your cookie consent preferences | 12 months |
| __stripe_mid / __stripe_sid | Stripe | Fraud prevention during checkout | 1 year / 30 min |
3.2 Functional Cookies
These cookies enable optional features that improve your experience. They are set only with your consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| theme | ATPL Training | Remembers your light/dark mode preference | 12 months |
3.3 Analytics Cookies
These cookies help us understand how the Website is used, so we can improve performance and prioritise new features. They are set only with your consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| ph_*_posthog | PostHog (EU cloud) | Anonymous usage analytics — page views, feature interactions, session duration | 12 months |
| _vercel_insights_* | Vercel | Web vitals & performance monitoring | Session |
| _ga / _ga_* | Google Analytics | Aggregated traffic and engagement metrics | 2 years |
PostHog is hosted on EU infrastructure. Vercel Analytics and Vercel Speed Insights are provided by Vercel Inc. and operate without cookies where possible, using beacon signals that do not track individuals.
4. Third-Party Cookies
Some of the cookies listed above are set by third-party services we use to operate the Website. These providers act as our data processors and are contractually bound to process data only on our instructions:
- Supabase, Inc. — Authentication and database hosting (EU region). Privacy Policy
- Stripe, Inc. — Payment processing. Privacy Policy
- PostHog, Inc. — Product analytics (EU cloud). Privacy Policy
- Vercel Inc. — Hosting, CDN, and performance analytics. Privacy Policy
We do not allow third-party advertising cookies or tracking cookies for marketing purposes on our Website.
5. Managing Your Preferences
5.1 Cookie Banner
When you first visit the Website, a cookie banner appears at the bottom of the page. You can:
- Accept All — Enable all cookie categories.
- Manage Preferences — Choose which categories to allow.
- Reject All (non-essential) — Only strictly necessary cookies are set.
You can change your preferences at any time by clicking the “Manage Cookies” link in the Website footer, or by clearing your browser cookies and revisiting the site.
5.2 Browser Settings
Most web browsers also allow you to manage cookies through their settings:
Please note that blocking strictly necessary cookies will prevent you from signing in and using the core features of the Platform.
6. iOS Mobile Application
The ATPL Training iOS App does not use browser cookies. However, the App stores authentication tokens and preferences locally on your device using Apple's built-in storage mechanisms (Keychain and UserDefaults). For details about data collection and tracking within the App, including our use of PostHog for analytics and Sentry for crash reporting, please refer to our Privacy Policy.
7. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, the cookies we use, or for operational, legal, or regulatory reasons. Material changes will be communicated through our Website or via email. The effective date at the top of this page indicates when the latest revision took effect.
8. Contact
For questions about this Cookie Policy or to exercise your data protection rights:
Email: info@atpltraining.io
You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee or with your local supervisory authority.
ATPL Training
Tallinn, Estonia