Cookie Policy

The first time you visit, a banner asks what you are comfortable with. Rejecting is exactly as easy as accepting: both are single buttons of equal prominence, no box is pre-ticked, and declining does not limit any part of the Service.

If you are in the EU, EEA, or UK, no analytics or marketing cookie, pixel, tag, or local-storage item is set before you have given consent. Until you choose, Google's advertising identifiers are redacted and every non-essential tag is held back.

Wherever you are, your choice is stored per browser. If you use Path2Trade on another device or clear your browser storage, you will be asked again.

We honor the Global Privacy Control (GPC) signal. If your browser or an extension sends it, we treat that as an instruction to opt out: the analytics and marketing categories are switched off automatically, and we do not show you the banner at all. There is nothing you need to click.

The signal takes precedence over any earlier choice you made on this browser. If you would rather turn a category back on despite it, you can — open Cookie settings and save your preferences, and that decision overrides the signal on this browser until you change it again.

GPC is a legally binding opt-out under California's CCPA/CPRA and the Colorado, Connecticut, and Texas privacy laws. It is not required in the EU, EEA, or UK, where nothing non-essential runs without your consent in the first place — we honor it there too.

Required for the site to work: keeping you signed in, protecting against abuse, and remembering the consent choice you made. These cannot be switched off, and they are never used for advertising or cross-site tracking.

Helps us understand how the site is used so we can improve it. We use Google Analytics 4 and Amplitude, both loaded through Google Tag Manager. We use them to measure how lessons and practice sessions are used in aggregate, not to identify you personally, and we do not use this data to target advertising. Nothing in this category is stored unless you turn analytics on.

Lets us measure advertising campaigns and show relevant ads on other platforms. This category is off unless you turn it on, and while it is off, Google's ad identifiers are redacted and no advertising cookies are written.

We use Google Tag Manager to load the tags listed above. Tag Manager is the delivery mechanism rather than a category of its own: it sets no cookies for its own purposes and collects nothing about you by itself.

It loads on every page so that it can enforce your choice, but it starts with every non-essential permission denied. Google's own tags read those permissions directly and stay dormant until you grant them; other tags, including Amplitude, are held back entirely and fire only once analytics consent has been given.

Withdrawing consent is as easy as giving it. Use Cookie settings — in the footer of any page, or here — to reopen your preferences and change any category. The change takes effect immediately.

You can also delete cookies and site storage through your browser settings. If you clear the storage above, you will be asked to choose again on your next visit.

To be able to demonstrate that consent was given, we store the choice itself against the anonymous p2t-vid identifier, together with the version of this policy, how the decision was reached — you chose it, it came from a Global Privacy Control signal, or we applied a rejection because you opened this policy from the consent banner — and a salted, irreversible hash of your IP address. We do not store your IP address itself, your browser user agent, the pages you visited, or your account details alongside it.

Each decision is recorded separately and earlier ones are not erased, so the record shows what applied and when. That includes the period before you changed your mind: if you later withdraw consent, we keep the record of the consent that was in force beforehand, because we may have to show that the processing at the time was lawful. Withdrawing takes effect immediately regardless — it stops the processing going forward, and the retained record is only ever used as proof of what was agreed.

The third parties named above process data under their own privacy policies as well as ours:

• Google (Analytics, Ads, Tag Manager)
• Amplitude
• Supabase

How we handle personal data more generally, including your rights over it, is described in our Privacy Policy.

If we add, remove, or repurpose a cookie, we update the tables above and the version number at the top of this page. Where the change affects a non-essential category, we ask you to make your choice again rather than carrying over the old one.

Email support@path2trade.com.