Cookie Policy
NSTN Ltd
Version 1.0 · Last updated: 20 September 2026
What cookies are
A cookie is a small file a website stores on your device so it can recognise your browser later. Some are set by the website you are visiting, some by other companies whose services run on its pages.
Local storage and session storage are two other ways a website can keep information on your device. They are not called cookies, but we treat them the same way here, because they do the same job and the same rules apply to them.
How we use them
Everything the platform stores on your device is there to make it work: to keep you signed in, to protect the sign-in page from automated abuse, and to take payment when a school buys a licence.
We use no analytics, no advertising and no tracking cookies. We do not follow you across other websites, and we do not build a profile of you.
Because none of it is optional, there is no banner asking you to choose. There is nothing to opt out of that would leave the platform usable.
What the platform stores
| Name | Type | Set by | What it does | How long it lasts |
|---|---|---|---|---|
| auth-token | Cookie | This platform | Keeps you signed in as you move between pages | Until you sign out, or longer if you chose “Keep me logged in” |
| auth-user | Cookie | This platform | Holds your name and role so the right screens load without waiting for the server | Same as above |
| global-search-history | Local storage | This platform | Remembers your recent searches so you can repeat one quickly | Until you clear it |
| welcome_pending | Session storage | This platform | Shows the welcome message once after you sign in, not on every page | Until you close the tab |
| peo_application_submitted | Session storage | This platform | Records that an application was sent, so it is not submitted twice | Until you close the tab |
| __cf_bm, cf_clearance | Cookie | Cloudflare | Runs Turnstile on the sign-in and registration pages, which tells the difference between a real person and an automated script | From 30 minutes to a year, depending on the cookie |
| __stripe_mid, __stripe_sid | Cookie | Stripe | Processes card payments and detects fraud, on the payment and billing pages only | 30 minutes for the session cookie, a year for the other |
That is the whole list. There is no tag manager, no advertising pixel, no embedded video from another site and no chat widget.
Cloudflare Turnstile
The sign-in and registration pages are protected by Cloudflare Turnstile. It is the invisible kind, so there is no checkbox to tick and no puzzle to solve. It collects technical information about your device and how you interact with the page.
Because your browser connects to Cloudflare directly, Cloudflare will also see your IP address as part of that connection. Cloudflare handles what it collects under its own terms.
Stripe
When a school buys or renews a licence, the payment form is provided by Stripe. Stripe sets cookies to process the payment and to detect fraudulent transactions.
Card details go directly to Stripe and are never stored on our systems. These cookies only appear on the payment and billing pages.
Fonts and hosting
The platform's interface font is served from the platform itself, so your browser does not contact a font provider when you use it.
The platform is hosted on Amazon Web Services in its London region. The hosting sets no cookies of its own.
Changing your mind
There is no cookie setting to change. Everything listed above is needed for the platform to work, so there is no optional tracking to switch off and nothing is stored for any other purpose.
You can delete or block cookies in your browser settings, but blocking them will sign you out and stop parts of the platform working. If we ever add anything that is not strictly necessary, we will ask you first, and refusing will be as easy as accepting.
Contact
Email admin@nstn.co.ukwith any question about this policy. Our full details, including our company number and our registration with the Information Commissioner's Office, are in our Privacy Policy.
If you are not happy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
See also: Privacy Policy · Terms of Service
These policies cover the PQM training platform. For the NSTN website, see nstn.co.uk/privacy-policy and nstn.co.uk/cookie-policy.