The Pronunciation Refinery

The Pronunciation Refinery · Legal

Cookies & local storage

Effective 8 November 2026

This notice covers cookies and similar storage/access technologies, including local storage. The rules are not limited to cookies, and third-party technology does not become exempt merely because someone else sets it.

Controller: James Leyshon T/A The Pronunciation Refinery. Email [email protected] . Postal/business address: 84 Victoria Road, Bradmore, Wolverhampton, WV3 7EU, United Kingdom.

1. Essential and requested functions

Sign-in/session storage is used to provide secure access you request. Theme preferences, course progress, quiz scores, Daily Activity and certificate information use browser storage to provide the functions you choose. Security providers and Stripe may use technologies necessary for security or a payment you request.

Only technologies meeting a relevant PECR exception can operate without prior consent. Convenience alone does not make a technology strictly necessary. Sign-in storage is used for the secure Account session you request. Theme, progress and practice records are used for the learning/preferences functions you choose, not advertising. The strictly necessary exception applies only to a genuinely necessary requested function, not to unrelated profiling or marketing. A fresh, signed-out homepage observation found no readable cookies or local/session-storage entries. Cloudflare security or a requested payment may set necessary identifiers in different circumstances; their existence is not assumed on every visit.

2. Observed browser-storage families

These browser records generally persist until removed by the app, logout/session expiry as applicable, or your browser controls. These local-storage records have no browser-imposed expiry unless the application removes them: they may remain until you clear site data. Logging out does not necessarily erase learning preferences or progress. Authentication tokens have session/refresh rules managed by Supabase and should not be confused with a permanent login cookie. The legacy pr-refinery-member record may remain from an older version; clear site data to remove it. This does not cancel a subscription. We do not invent a fixed cookie lifetime where the source does not set one.

3. Optional media and third parties

Lessons can embed YouTube. Loading an embedded player can disclose your IP address and device information and may store/access information on your device. Pressing Play alone is not proof of informed consent to every non-exempt purpose.

Before publication, identify and block non-exempt technologies until valid consent, with equally easy refusal and withdrawal. Where an exception genuinely applies, explain it instead of collecting unnecessary consent. Video players are optional and are not embedded until you choose Play. The source uses a YouTube privacy-enhanced domain and locally hosted thumbnails. Once loaded, a provider receives request/device information and may use storage for playback or its other purposes. Necessary requested streaming may qualify for an exception, but unrelated advertising or tracking does not. We do not treat an ordinary Play click as blanket consent to non-essential tracking. Provider behaviour can change; do not enable non-exempt tracking without an appropriate prior choice and a withdrawal route.

Stripe’s hosted checkout and Cloudflare security may use their own technologies. Stripe Managed Payments and Cloudflare may use security/session technologies needed for transactions or protection against abuse. Stripe/Link and the video providers supply their own privacy and storage information. The public homepage observation is not a full inventory of authenticated, payment or third-party-player contexts, and cannot see every HttpOnly or third-party cookie. We do not list invented names or expiry periods as if they were measured.

4. Analytics, advertising and email tracking

No standalone analytics or advertising integration was established by this source audit; this is not a guarantee that none runs in production. Resend open/click tracking was observed disabled in the current account. A Cloudflare Web Analytics/RUM beacon was observed on the live homepage. Cloudflare documents that this service does not use cookies, localStorage or other persistent client-side state for tracking, and does not fingerprint individuals for analytics. It collects page/performance information. No advertising-cookie integration or first-party non-essential cookie was established by the inspected source and fresh homepage observation. Resend open/click tracking was observed disabled. This is a scoped observation, not a blanket claim that every third-party context is cookie-free.

Non-exempt analytics, advertising or tracking must not be pre-enabled. Any future choices must be granular, clear and as easy to withdraw as to give.

5. Your controls

Your browser lets you clear cookies/site data and block storage. Clearing it may sign you out, reset preferences or remove learning progress stored only on that device. Cancelling a subscription does not itself clear browser data.

This notice does not install a consent platform or claim to give working optional-cookie preferences. No new cookie banner has been added because a non-essential cookie on the public initial visit was not established. A banner is not needed merely to display an unnecessary Accept button. If non-exempt storage/tracking is introduced or found in an optional player, it must be blocked until the required consent and have an equally easy persistent way to refuse or withdraw; update this notice at the same time. You can avoid loading optional players and use browser controls to clear or block site data. Read the privacy notice for your data-protection rights.