Legal
Cookie policy
Last updated 2026-04-21.
Our stance
SkillBricks uses the minimum set of cookies and local-storage items required to run the service. We do not embed advertising trackers, third-party marketing pixels, or cross-site identifiers. Analytics are self-hosted and never fire for UK or EU visitors without explicit consent.
Categories we use
- Essential
- Required for the service to function - authentication, CSRF protection, your cookie preferences. Strictly necessary under PECR Regulation 6(4) and do not require consent.
- Functional
- Remember preferences such as your theme choice. Not strictly necessary but low risk; we set these as essential-adjacent and do not link them to identity. You can clear them at any time from your browser.
- Analytics
- Used to improve the product (funnel analysis, error diagnosis, anonymised session replay with form inputs masked). Opt-in only for UK and EU visitors via the cookie banner. Hosted on our own infrastructure; no data reaches a third-party analytics provider.
Cookie inventory
The full set of cookies and browser-storage keys we set. Names prefixed with sb- are SkillBricks; the ph_* family belongs to our self-hosted PostHog instance.
| Name | Category | Purpose | Expiry |
|---|---|---|---|
sb-access-tokenMockif LTD (via Supabase Auth) | Essential | Keeps you signed in. Required for every authenticated route. | Session, refreshed on activity (up to 7 days) |
sb-refresh-tokenMockif LTD (via Supabase Auth) | Essential | Allows your session to renew without forcing you to log back in. | 30 days |
sb-csrfMockif LTD | Essential | Protects Server Actions against cross-site request forgery. | Session |
sb-consentMockif LTD | Essential | Records your cookie-banner choice so we do not ask again on every page view. | 6 months |
sb-themeMockif LTD | Functional | Remembers your preferred colour mode. | 12 months |
ph_*Mockif LTD (self-hosted PostHog) | Analytics | Product analytics and anonymised session replay used to diagnose bugs and measure funnels. Form inputs are masked and assessment screens opt out entirely. | 12 months |
Short-lived cookies set by our CDN (Cloudflare) for bot mitigation during a session are not listed individually; Cloudflare publishes its own inventory on its site.
Consent and how to change your choice
When you first visit SkillBricks from the UK or EU we show a cookie banner that distinguishes essential from analytics. Analytics fire only after you accept. You can withdraw consent at any time:
- Re-open the banner from the footer link when it ships.
- Clear cookies for
skillbricks.aiin your browser to reset your choice. - Enable “Do Not Track” or Global Privacy Control in your browser; we treat both as an opt-out signal for analytics regardless of banner state.
Declining analytics does not degrade the service in any way. Authentication, payments, assessments, and unlocks all work identically.
Related policies
This cookie policy sits alongside the privacy policy and the data-processing page, which list the subprocessors we work with and the lawful bases for each activity.
Contact
Questions about this policy? Email privacy@skillbricks.ai.