Cookies & Storage / Access Technologies Policy
Website, Tutoring Platform & Learning App
FINAL • 4 OCTOBER 2026
1. What are cookies and similar technologies?
Cookies are small files or pieces of information stored on or accessed from a user’s device. Similar storage/access technologies can include web storage, pixels, scripts, tags, SDKs, device identifiers and other technologies that store or access information on a browser, phone, tablet or other device.
UK rules under the Privacy and Electronic Communications Regulations 2003 (PECR), together with data-protection law where personal data is involved, may apply to these technologies.
2. Why we may use them
- Strictly necessary / requested-service technologies: for authentication, account security, session management, fraud/security controls or essential checkout functionality.
- Preferences and functionality: to remember choices or provide optional features where the applicable legal requirements are met.
- Analytics and performance: to understand how users interact with the service and improve performance where consent is obtained or another specific legal exception lawfully applies.
- Marketing and advertising: to measure campaigns or personalise/target advertising only where implemented and where the required consent and safeguards are in place.
3. Consent, exceptions and your choices
Where consent is required under PECR, Academiq Maestro will not intentionally activate the relevant non-essential storage/access technology until valid consent has been obtained. Some technologies may operate without consent where a specific statutory exception applies, for example where they are strictly necessary to provide a service requested by the user or where another PECR exception is satisfied.
Where an exception requires us to provide a simple means of objecting, we will do so. We will not treat analytics, functionality or other technologies as exempt merely because they are useful to us; the conditions of the relevant exception must actually be met.
Users should be able to accept or reject technologies that require consent and later change their choices through the available privacy controls. Blocking strictly necessary technologies may prevent parts of the service from working correctly.
Where our services are likely to be accessed by children, we apply particular care to privacy information, high-privacy defaults and unnecessary tracking.
4. First-party and third-party technologies
Some technologies may be set or operated directly by Academiq Maestro. Others may be provided by service providers that support functions such as payments, video tutoring, authentication, hosting, security, analytics or communications. A third-party service being used by Academiq Maestro does not automatically mean that it sets a cookie or tracker on every page or device.
5. Current cookie / technology inventory
The table below reflects the storage/access technologies identified through our review of the live production services. We review this inventory periodically and when our technologies or providers materially change.
| Name / technology | Provider | Purpose | Category / legal basis | Duration | 1st / 3rd party |
|---|---|---|---|---|---|
| accessToken / idToken / userProfile | Academiq Maestro / Auth0 | Authentication and account session | Strictly necessary / requested service | Up to 7 days | 1st party |
| refreshToken | Academiq Maestro / Auth0 | Maintain authenticated session | Strictly necessary / requested service | Up to 30 days | 1st party |
| am_cookie_consent | Academiq Maestro | Store Analytics/Marketing choices and consent ID | Strictly necessary for consent/preferences | Until changed/replaced | 1st party |
| GA4 / Google Consent Mode v2 | Analytics; advertising-related Google storage only when Marketing is enabled | Consent — Analytics and Marketing independently gated | Google-configured lifespan; no analytics/advertising cookie before relevant consent | 3rd party | |
| Stripe.js / __stripe_mid / __stripe_sid | Stripe | Payment processing and fraud prevention on payment pages | Strictly necessary | Provider-controlled/session-dependent | 3rd party |
| Zoom Video SDK / RealtimeKit | Zoom / Cloudflare | Deliver live tutoring sessions | Strictly necessary / requested service | Provider/session dependent | 3rd party |
| am_find_maestro_last_venue | Academiq Maestro | Remember last selected Find Maestro venue | Functional / requested-service storage | 24 hours | 1st party |
6. How long technologies remain
Some technologies operate only for the current browser/app session; others may remain for a defined period. The live inventory will state the actual duration for each technology and those durations will be reviewed for necessity and proportionality.
7. Managing cookies and similar technologies
Where available, users can manage technologies through our consent settings. Browser or device settings may also allow users to block or delete certain cookies or stored information. Where consent is required, rejecting should be genuinely available and users should be able to withdraw consent as easily as it was given.
8. Children’s privacy
Because Academiq Maestro is likely to be accessed by children, unnecessary tracking should be avoided and child-facing journeys should use high-privacy defaults. Advertising pixels or behavioural advertising should not be enabled on child-facing journeys unless a separately documented lawful design justifies them.
9. Changes to this policy
We may update this policy when our technology, providers or legal requirements change. Material changes will be reflected in the version/date shown at the top and, where required, users will be asked to make a new choice.
10. Contact
Questions about privacy, cookies or similar technologies can be sent to admin@academiqmaestro.com.