Cookie policy

1. Cookies we use

AssessHub uses strictly necessary cookies only. We do not use advertising cookies or cross-site tracking.

• Authentication cookies (set by our provider Clerk, e.g. __session) — keep you signed in securely and enforce session/device limits. Essential; lifetime up to 7 days or as configured by your organisation.
• Security tokens (CSRF and similar) — protect forms and API requests. Essential; session lifetime.
• Preference storage (localStorage, not a cookie) — remembers device-side settings such as offline downloads and draft autosaves. Essential to the offline features; stays on your device.

2. Payments

When you visit the billing checkout or customer portal, Stripe sets cookies on its own domains for fraud prevention and to operate the payment session. See Stripe’s cookie policy for details.

3. Consent

Because we only use cookies that are strictly necessary to provide the service you request, UK PECR does not require a consent banner. If we ever introduce analytics or marketing cookies, we will ask for consent first and update this page.

4. Managing cookies

You can block or delete cookies in your browser settings, but blocking the essential cookies above will prevent you from signing in to the application.