Last updated: 7 June 2026
Cookie Notice
1. What this notice covers
This Cookie Notice explains how ApprenticeshipOS uses cookies and similar browser-storage technologies.
2. Essential technologies
We may use essential technologies to keep users signed in, protect account security, support billing redirects, remember essential interface settings and operate the website reliably.
3. Optional technologies
ApprenticeshipOS may use optional analytics or marketing technologies only after valid consent where consent is required. Optional technologies must not load before a user makes a choice.
Optional analytics and marketing scripts are not currently active in the inspected source. The consent framework is ready for future optional technologies, including planned Supabase analytics if it is introduced before launch.
4. Inventory
| Name | Provider | Type | Purpose | Essential? | Duration |
|---|---|---|---|---|---|
| sb-*-auth-token | Supabase | Cookie | Maintains authenticated sessions and protects restricted account areas. | Yes | Session-managed by Supabase Auth |
| apprenticeshipos-theme | ApprenticeshipOS | Local storage | Remembers light, dark or system appearance preference. | Yes | Until changed or cleared |
| evidence-view | ApprenticeshipOS | Local storage | Remembers card or table view preference in Evidence Vault. | Yes | Until changed or cleared |
| apprenticeshipos-cookie-preferences | ApprenticeshipOS | Local storage | Remembers cookie preference choices. | Yes | Until changed or cleared |
| Stripe checkout and billing-session storage | Stripe | Third-party cookies or similar technologies | Supports secure checkout and billing-management redirects when you choose to use Stripe-hosted billing pages. | Yes for billing flows | Managed by Stripe |
| Cloudflare Turnstile challenge storage | Cloudflare | Third-party anti-abuse technology | Supports CAPTCHA/bot-protection challenges on authentication forms when Turnstile is configured. | Yes for protected auth forms when enabled | Managed by Cloudflare |
| Upstash Redis rate-limit counters | Upstash | Server-side request-protection storage | Limits abusive or repeated requests to protected app-owned routes such as Premium billing session creation and Portfolio Export. | Yes for request protection | Short-lived rate-limit windows configured by ApprenticeshipOS |
5. Managing preferences
Users must be able to accept optional cookies, reject optional cookies and manage preferences. Reject must be as easy as accept. You can change preferences later using the Cookie preferences link in the footer.
6. Contact
Questions can be sent to support@apprenticeshipos.com.