Prism Cyber Core Cookie Policy
The Cookie Policy describes local-storage sign-in tokens, browser preferences, optional education affiliate attribution, and browser controls. This sign-in flow does not use authentication cookies.
Statement of Principle
Prism Cyber Core does not sell or lease personal data or use behavioural advertising retargeting. Necessary service records support security and reliability. Optional education affiliate attribution is separate, requires your choice to allow it, and is described below.
Cookies & Browser Storage
- Class 1 — Essential Authentication Storage (First-Party): The current web app stores signed session tokens (JWTs) in browser local storage and sends them to the API in the Authorization header. This sign-in flow does not use authentication cookies. JWT claims can be decoded; the signature protects integrity, not confidentiality. The default session lifetime is 90 days, subject to server configuration and earlier revocation. Keep session tokens private.
- Class 2 — Functional Preference Storage (First-Party): The web app uses browser local storage to remember supported user-selected preferences and settings across visits. These preference records are separate from the session token and are not authentication cookies.
- Class 3 — Optional Education Affiliate Attribution: On /education, the Masterclass sales page, and its checkout-start page only, optional Lemon Squeezy affiliate tracking runs only after you choose Allow affiliate tracking. The current vendor script uses a first-party ls_aff_ref referral cookie and a browser fingerprint, and sends the page URL, referring URL, affiliate or click reference, and derived browser identifier to Lemon Squeezy to credit eligible referrals. The referral cookie’s expiration is supplied by Lemon Squeezy. The consented tracking ID is passed to Prism's checkout API and added to the generated Lemon Squeezy checkout URL as aff_ref. It does not receive selected scan contents or grant course access. Declining does not prevent browsing or buying.
Telemetry & Analytics Boundaries
The Service may process aggregate operational metrics and diagnostic information needed for reliability and security. Review the Privacy Policy for the current scope of service records and telemetry.
Third-Party Cookies
On /education, the Masterclass sales page, and its checkout-start page only, optional Lemon Squeezy affiliate tracking runs only after you choose Allow affiliate tracking. The current vendor script uses a first-party ls_aff_ref referral cookie and a browser fingerprint, and sends the page URL, referring URL, affiliate or click reference, and derived browser identifier to Lemon Squeezy to credit eligible referrals. The referral cookie’s expiration is supplied by Lemon Squeezy. The consented tracking ID is passed to Prism's checkout API and added to the generated Lemon Squeezy checkout URL as aff_ref. It does not receive selected scan contents or grant course access. Declining does not prevent browsing or buying.
Use Affiliate privacy on the education or Masterclass sales/checkout-start pages to allow or decline this tracking. Your choice is remembered in first-party local storage until changed or cleared; when storage is unavailable it lasts only for the current page session. Withdrawing consent clears the referral cookie and reloads the page to stop the vendor script. Clearing that cookie or declining tracking may prevent referral credit. Your affiliate tracking choice does not change authentication, pricing, purchase eligibility, or course-access permissions. Lemon Squeezy-hosted checkout remains subject to its own policies.
Your Cookie & Browser Storage Controls
You may clear or restrict cookies and browser storage through your browser settings. Clearing the stored session token signs this browser out; restricting local storage may prevent sign-in from persisting across visits. Clearing preference records resets stored settings. Blocking cookies alone is not the same as clearing local storage. Sign out through the app to revoke the server session.
Policy Updates
This Cookie Policy may be updated to reflect changes to our technical infrastructure or applicable law. Continued use of the platform constitutes acceptance of any revised policy.
Contact
Cookie and telemetry inquiries: support@prismcybercore.com
Software release status
Prism Cyber Core software is pre-release: final testing and release preparation are in progress. No public launch or access date has been announced. Native desktop and mobile packages are not publicly released.
Education is a separate product line; purchase availability is shown for each course.