Working draft — pending qualified healthcare IP counsel review. This document describes Ibis Learning's current posture in plain English. It is not legal advice and has not yet been reviewed by an attorney licensed to practice in the United States. It will be replaced with a counsel-reviewed version before we accept paying customers. If you are evaluating whether to trust your data to Ibis Learning, please contact us directly with questions.

Ibis Learning

Cookie Policy

Effective: 2026-04-19 · Draft v1

Ibis Learning uses a small number of cookies and related browser storage mechanisms to operate the service. We do not use advertising cookies, we do not track you across other websites, and we do not sell browser data.

1. What we use, and why

Essential cookies (required)

Authentication session. When you log in, we set a secure, HTTP-only cookie containing your session token. This is how the application knows who you are on your next page load. Without it, you would have to re-authenticate on every request. Managed by our auth system (NextAuth) under the cookie name prefix next-auth..
CSRF protection token. A short-lived cookie used to validate that form submissions originated from our own site. Essential security; you cannot opt out and still use the service.

Functional preferences (browser storage, not cookies)

Theme preference. Your selected light/dark theme is saved in localStorage under the key ceu.theme. This stays in your browser only; we never read it on the server.

Payment processor cookies (set by Stripe)

When you access our billing pages, Stripe may set cookies required to complete payment. These are governed by Stripe's privacy policy. We do not control them.

2. What we do NOT use

No Google Analytics, Mixpanel, or similar behavioral analytics.
No advertising or retargeting cookies.
No session replay tools (Hotjar, LogRocket, FullStory) that would record your screen activity.
No social-media embed trackers (Facebook Pixel, Twitter analytics, LinkedIn Insight).

This list is deliberate. For a healthcare CE product that may be used in exam rooms, call rooms, or during breaks between patients, the cost of tracking outweighs the product benefit.

3. How to control cookies

You can clear cookies through your browser's settings. If you clear our authentication cookie you will be logged out of Ibis Learning and will need to sign in again. Clearing your theme preference will reset the theme to our default.

Most browsers offer a "Do Not Track" signal. Because we do not track you beyond the essential authentication and security cookies, we have nothing to stop when the signal is present. The same cookies are used regardless.

4. Changes to this policy

If we add or remove cookies (for example, if we add an opt-in enterprise analytics integration for workforce reporting dashboards), we will update this page and notify active users by email at least 14 days in advance.

5. Contact

Questions? Email privacy@ibislearn.com.