Cookie Policy

Last Updated: September 4, 2026

This Cookie Policy explains how CourseDeck (“we”, “us”, or “our”) uses cookies and similar technologies when you access or use our website and SaaS platform (the “Service”).

This policy should be read together with our Privacy Policy and Terms of Service.

1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile device) when you visit a website. Cookies help websites function properly, improve security, remember user preferences, and provide insights into how services are used.

Cookies may be session cookies (deleted when you close your browser) or persistent cookies (stored for a defined period).

2. Categories of Cookies and Similar Technologies We Use

CourseDeck uses technologies that are strictly necessary to operate and secure the Service, along with limited functional and analytics technologies.

On our marketing website, we also use optional Google Analytics and Google Ads measurement technologies when you allow the corresponding category through our Cookie Preferences controls.

We do not use Google Analytics or Google Ads measurement to target students or minors, and we do not use Google Ads measurement for behavioral advertising, profiling, or marketing to minors.

3. Cookie and Technology Details

3.1 Strictly Necessary Cookies

These cookies and similar technologies are essential for the operation, authentication, security, or privacy-choice functionality of the Service and cannot be disabled through our Cookie Preferences controls.

Cookie / TechnologyPurposeDurationLegal Basis / Reason
coursedeck_consentRemembers your choices for Google Analytics and Google Ads measurement180 daysNecessary to remember privacy choices
Main application authentication and session cookies (Auth.js)User authentication and session securitySession / PersistentContractual Necessity
Enrollment authentication cookies (enroll-auth.*)Enrollment authentication and session securitySession / PersistentContractual Necessity
Platform authentication and security cookies (cd_platform.*)Platform authentication and securitySession / PersistentContractual Necessity

Exact cookie names and secure prefixes may vary depending on the browser, authentication context, and deployment environment.

3.2 Functional Cookies

These cookies enhance usability and remember user preferences.

Cookie NamePurposeDurationLegal Basis
Preference cookiesLanguage, UI settingsPersistentLegitimate Interest
Feature enablement cookiesEnable optional platform featuresSession / PersistentLegitimate Interest

3.3 Analytics Technologies

Analytics technologies help us understand how the Service or our marketing website is used so we can improve performance, reliability, and user experience.

ProviderPurposeDurationLegal Basis
PostHogProduct usage analytics (event-based)PersistentLegitimate Interest / Consent, depending on context
Google AnalyticsWebsite usage and interaction analytics on the marketing websitePersistentConsent

Google Analytics on our marketing website is optional and is not loaded until you allow Google Analytics through Cookie Preferences.

PostHog is a separate product analytics service. The Google Analytics and Google Ads choices in the Cookie Preferences panel do not represent a universal opt-out from all product analytics used elsewhere in the Service.

3.4 Advertising Measurement Technologies

On our marketing website, we use Google Ads measurement to understand the performance of our Google advertising, including conversion events such as clicking a “Get Started” link that leads to our registration page.

ProviderPurposeDurationLegal Basis
Google AdsAdvertising performance and conversion measurement on the marketing websiteVaries by Google technology and settingsConsent

Google Ads measurement is optional and is not loaded until you allow Google Ads measurement through Cookie Preferences.

When Google technologies are allowed, your browser may send information to Google such as the page URL, IP address, browser or device information, and cookie or advertising identifiers used for measurement. For more information, see How Google uses information from sites or apps that use our services.

4. Cookies and Similar Technologies Used by Lemon Squeezy (Merchant of Record)

Our payment partner Lemon Squeezy acts as Merchant of Record for purchases made through CourseDeck.

On Lemon Squeezy-hosted checkout or payment-related pages, Lemon Squeezy may use cookies or similar technologies for purposes such as:

  • payment and transaction processing,
  • fraud prevention,
  • payment security,
  • tax and compliance administration, and
  • transaction management.

Lemon Squeezy’s handling of payment-related personal data and technologies is governed by its own applicable terms, privacy policy, and data processing arrangements.

5. Legal Basis for Cookie and Technology Use

Under GDPR, UK GDPR, and other applicable privacy laws, the legal basis or permission required for a technology depends on its purpose and the context in which it is used.

  • Strictly Necessary Technologies: Used as necessary to provide, secure, or operate the Service or remember privacy choices.
  • Functional Technologies: Used based on legitimate interests where permitted.
  • Google Analytics on the Marketing Website: Loaded only after you allow Google Analytics through Cookie Preferences.
  • Google Ads Measurement on the Marketing Website: Loaded only after you allow Google Ads measurement through Cookie Preferences.
  • PostHog Product Analytics: Used under the legal basis applicable to the relevant processing context, as further described in our Privacy Policy.

6. Cookies and Protection of Minors

CourseDeck is a B2B SaaS platform serving educational institutions. Customer-configured enrollment, portal, or educational workflows may involve personal data relating to minors.

  • The optional Google Analytics and Google Ads measurement technologies described in Sections 3.3 and 3.4 are used on our marketing website and are not used to target students or minors.
  • We do not use Google Ads measurement for behavioral advertising, profiling, or marketing to minors.

The relevant educational institution or organization is responsible for determining the lawful basis for processing student data and for obtaining parental, guardian, or other authorization where required by applicable law.

7. How to Manage or Opt Out of Cookies and Similar Technologies

7.1 CourseDeck Cookie Preferences

On your first visit to our marketing website, if you have not already saved a choice, CourseDeck displays a privacy choices banner with the following options:

  • Allow all
  • Decline
  • Manage preferences

Under Manage preferences, you can separately allow or decline:

  • Google Analytics
  • Google Ads measurement

You can change these choices later by selecting Cookie Preferences in the footer of our marketing website.

These controls apply specifically to the optional Google Analytics and Google Ads measurement technologies described above. They do not disable strictly necessary technologies or represent a universal opt-out from all product analytics used elsewhere in the Service.

7.2 Browser Controls

Most browsers allow you to:

  • Block or delete cookies
  • Receive alerts before cookies are stored

Please note that disabling strictly necessary cookies may affect Service functionality.

7.3 Google Analytics Opt-Out

In addition to CourseDeck Cookie Preferences, you may opt out of Google Analytics tracking by using Google’s official browser add-on: https://tools.google.com/dlpage/gaoptout

7.4 PostHog and Browser Privacy Controls

Where enabled, PostHog respects browser-level Do Not Track (DNT) signals and privacy controls in accordance with our implementation.

8. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect legal, technical, or operational changes. The “Last Updated” date at the top indicates the latest revision.

9. Contact Us

If you have questions about this Cookie Policy or our use of cookies and similar technologies, please contact:

Email: support@mycoursedeck.com