Cookie Policy

Last updated: March 2026 · Effective immediately upon publication

RGPD/GDPRLOPDGDDLSSICECEFRCOPPA

This Cookie Policy explains how PROP, operated by SEBA, uses cookies and similar tracking technologies on the Platform. It is written in compliance with EU Directive 2002/58/EC (ePrivacy Directive), EU Regulation 2016/679 (RGPD/GDPR), Spanish Law 34/2002 (LSSICE), and applicable international standards.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the Platform to recognise your device, remember your preferences, and provide a personalised experience. Similar technologies include local storage, session storage, and service worker caches used for Progressive Web App (PWA) offline functionality.

2. Cookies We Use

Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They do not require your consent under the ePrivacy Directive.

  • session_token — Authenticates your login session. Expires when you close the browser or after 7 days of inactivity. HttpOnly, Secure, SameSite=None.
  • csrf_token — Prevents cross-site request forgery attacks. Session-scoped.
  • language_pref — Stores your selected UI language (en/es/fr/ca). Expires after 1 year.

Functional Cookies

These cookies enhance your experience but are not strictly necessary. They are set only with your consent.

  • theme_pref — Stores your light/dark theme preference. Expires after 1 year.
  • onboarding_complete — Remembers whether you have completed the onboarding flow. Expires after 6 months.

Analytics Cookies

We use privacy-respecting analytics to understand how the Platform is used and improve it. Analytics data is aggregated and anonymised; it does not identify individual users.

  • _analytics_id — Anonymous visitor identifier for usage statistics. Expires after 13 months. No cross-site tracking.

Progressive Web App (PWA) Storage

The Platform uses a Service Worker and browser cache storage to enable offline functionality. This stores copies of exercise content, assets, and API responses on your device so you can continue learning without an internet connection. This data is stored locally on your device only and is not transmitted to third parties. You can clear this data at any time through your browser settings.

3. Third-Party Cookies

We use a limited number of third-party services that may set cookies:

  • SEBA OAuth — Used for authentication. Sets a session cookie during the login flow only. No advertising or tracking cookies are set.
  • Amazon CloudFront — Used to serve static assets (images, fonts). May set performance cookies. No personal data is collected.

We do not use advertising, retargeting, or social media tracking cookies. No data is shared with advertising networks.

4. Your Cookie Choices

You can manage your cookie preferences at any time:

  • Browser settings — Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in.
  • Profile settings — You can manage functional cookie preferences in your account Profile page.
  • Clear PWA cache — In your browser settings under "Site data" or "Storage", you can clear the Platform's offline cache.

For guidance on managing cookies in specific browsers: Chrome · Firefox · Safari · Edge

5. Consent and Legal Basis

Strictly necessary cookies are placed on the basis of legitimate interests and do not require consent. All other cookies are placed only with your explicit consent, which you can withdraw at any time without affecting the lawfulness of prior processing (RGPD/GDPR Art. 7(3)).

For users in Spain, this policy complies with the requirements of the Spanish Data Protection Authority (AEPD) Cookie Guide (2023 edition) and the LSSICE Article 22.2.

6. International Users

For users in the United States, this policy is consistent with the California Consumer Privacy Act (CCPA) and the Children's Online Privacy Protection Act (COPPA). For users in Canada, it is consistent with PIPEDA. For users in the United Kingdom, it is consistent with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

7. Updates to This Policy

We may update this Cookie Policy when we introduce new features or when legal requirements change. We will notify you of significant changes and, where required, seek fresh consent. The "last updated" date at the top of this page reflects the most recent revision.

8. Contact

For questions about our use of cookies, contact us at [email protected].