Legal
Cookies Policy
This policy lists every cookie ReinMaths uses, explains what each one is for and how long it lasts, and tells you how to give, change or withdraw your consent. It sits alongside our Privacy Policy, which covers personal information more broadly.
- Last updated
- In effect from
- Published by
- ReinMaths Limited
About this policy
This policy is published by ReinMaths Limited, a company registered in England and Wales under company number 17426840, whose registered office is at 38 Whalley Road, Clitheroe, BB7 1AW, Lancashire, England. It covers the ReinMaths website and web application.
Cookies that identify you, or that can be combined with other information to identify you, are also personal information. So this policy should be read together with our Privacy Policy , which explains the rest — what we collect, our lawful bases for using it, who we share it with, how long we keep it and the rights you have over it.
What cookies are
A cookie is a small text file that a website asks your browser to store on your device, and that the browser sends back on later visits. Cookies are what let a site recognise a returning browser — which is how you stay signed in between pages.
Throughout this policy, “cookies” also covers technologies that do a similar job, because the law treats them the same way:
- Local storage and session storage — larger stores in your browser that a site can read and write. We use them to hold things like an answer you have started typing, so a refresh does not lose your working.
- Pixels and tracking images — a tiny image loaded from a server so that the load itself can be recorded. We use these only in marketing emails you have asked to receive, never on the site.
- Software development kits and scripts that read or write information on your device.
A first-party cookie is set by ReinMaths. A third-party cookie is set by another organisation whose service we have embedded. A session cookie disappears when you close your browser; a persistent one stays until it expires or you delete it.
Your choice, and the law behind it
In short: the cookies that make the site work are set automatically, because it cannot work without them. Everything else — including analytics — is set only if you say yes, and you can change your mind whenever you like.
The rules come from the Privacy and Electronic Communications (EC Directive) Regulations 2003, usually called PECR, read together with the UK GDPR. Under regulation 6, we must tell you clearly what cookies we want to use and what they do, and get your consent before setting them.
There are only two exemptions, and they are narrow. Consent is not needed for a cookie whose sole purpose is carrying out a communication over a network, or one that is strictly necessary to provide a service you have asked for. “Strictly necessary” means the service genuinely cannot be delivered without it — not merely that it is useful to us. Analytics cookies are not strictly necessary, however legitimate the purpose, so we ask before setting them.
Consent has to meet the UK GDPR standard: a freely given, specific, informed and unambiguous indication of your wishes, given by a clear affirmative action. In practice that means:
- nothing non-essential is set before you have made a choice — not while the banner is on screen, and not while you scroll past it;
- no pre-ticked boxes, and no treating continued browsing as agreement;
- refusing is as prominent and as easy as accepting — the same number of clicks;
- you can withdraw consent at any time, as easily as you gave it, and the site keeps working if you do.
The categories we use
| Category | Needs your consent? | What it covers |
|---|---|---|
| Strictly necessary | No — they are exempt | Signing in, security, load balancing, remembering your cookie choices, taking payment. |
| Functional | Yes | Remembering preferences that make the service nicer to use but are not required for it to work. |
| Analytics | Yes | Counting visitors and understanding which pages are used, so we can improve them. |
| Advertising and tracking | Not used at all | We run no advertising, no ad-network pixels, no social media trackers and no cross-site profiling. |
The tables that follow list the individual cookies in each category. Cookie names and lifetimes set by third parties are outside our control and can change without notice; we review this register regularly, and you can always check what is actually stored using your browser’s developer tools.
Strictly necessary cookies
These are set whenever you use ReinMaths and cannot be switched off, because the service cannot be delivered without them. They do not track you across other websites and they are not used for analytics or advertising.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| rm_session | ReinMaths | Keeps you signed in as you move between pages. Without it you would have to log in again on every click. | Session, or 30 days if you tick "remember me" |
| rm_csrf | ReinMaths | A security token that proves a form was submitted from our site, blocking cross-site request forgery. | Session |
| rm_consent | ReinMaths | Remembers the cookie choices you made, so we do not ask again on every visit and do not set anything you refused. | 6 months |
| __cf_bm and similar | Our hosting and security provider | Distinguishes people from bots, mitigating automated abuse and denial-of-service traffic. | 30 minutes |
| Payment provider cookies | Our payment provider | Set only on the checkout and billing pages, to process your payment and detect fraudulent transactions. | Varies; see the provider’s own notice |
Note the third entry. Remembering that you refused needs a cookie of its own; without it we would have no way to know, and would have to ask again on every page.
Functional cookies
These remember choices you have made so the service behaves the way you left it. They are optional: refuse them and everything still works, but some preferences reset each visit.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| rm_prefs | ReinMaths | Remembers interface choices you have made, such as whether you are working on screen or on paper. | 12 months |
Analytics cookies
We use Google Analytics to count visitors and see which pages are used, so we know what to improve. These cookies are set only if you consent, and refusing them has no effect on how the service works for you.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
| _ga | Google Analytics | Assigns a randomly generated identifier so that repeat visits from the same browser can be counted as one visitor rather than several. | 2 years |
| _ga_ + container ID | Google Analytics | Holds the state of the current session so that a visit can be measured from beginning to end. | 2 years |
We configure Google Analytics to limit what it collects: IP addresses are truncated before storage, we do not enable advertising features, remarketing or Google Signals, and we do not share analytics data with Google for its own advertising purposes. Analytics data is retained for no more than 14 months. We use it in aggregate — to see that a page is confusing, not to follow an individual around.
Google Analytics is provided by Google Ireland Limited and may involve a transfer of information outside the UK. See Sending information outside the UK for the safeguards that apply. You can read Google’s privacy policy for their side of it.
Third parties, and what we deliberately avoid
We keep third-party code to a minimum, because every embedded script is another organisation with access to your browser. Some things other sites do routinely, we deliberately do not:
- No advertising or ad-network cookies. ReinMaths carries no advertising, so there is nothing to target.
- No social media pixels or share buttons that phone home. Our links to X, LinkedIn, Instagram, YouTube, TikTok and Facebook are ordinary links. They set nothing until you click them, and following one takes you to that company’s site, where its own policy applies.
- No web fonts loaded from Google. Our typefaces are downloaded at build time and served from our own domain, so displaying this page makes no request to a font server and discloses your IP address to nobody.
- No cross-site profiling, fingerprinting or data brokers.
Third parties that do set cookies are the ones named in the tables above: our hosting and security provider, our payment provider on the checkout pages, and Google Analytics if you have consented to it.
Changing or withdrawing your consent
You can change or withdraw your choices at any time, and the site will keep working if you refuse everything optional.
- Use our cookie settings. Open the cookie preferences from the link in the site footer, change whichever categories you like, and save. The change takes effect immediately: cookies in a category you have turned off are no longer set, and existing ones are cleared.
- Opt out of Google Analytics specifically by installing Google’s browser opt-out add-on, which works across every site you visit, not only this one.
- Use your browser controls to block or delete cookies — see the next section.
Your preference is stored per browser and per device, because that is where cookies live. If you use ReinMaths on a phone and a laptop, or in a private window, you will be asked on each. Clearing your cookies also clears the record of your choice, so we will ask again.
Withdrawing consent stops any further use from that point. It does not make what happened beforehand unlawful, and it does not by itself erase analytics data already collected — for that, use your right to erasure .
Browser and device controls
Every major browser lets you see the cookies stored, delete them, block them from particular sites, or block third-party cookies altogether. You can usually reach these settings through the padlock icon in the address bar, or under Privacy in the browser’s settings.
Blocking all cookies at browser level will stop you signing in, because the session cookie is what keeps you signed in. If you want to refuse the optional ones only, use our cookie settings rather than a blanket browser block.
Do Not Track and Global Privacy Control
Global Privacy Control (GPC) is a signal your browser or an extension can send to say you do not consent to optional processing. Where we receive a GPC signal we treat it as a refusal of all non-essential cookies, and we do not set them unless you later tell us otherwise through our cookie settings.
Do Not Track (DNT) is an older header with no agreed meaning, which browsers have largely withdrawn. We do not rely on it. Use our cookie settings or GPC instead — both do something definite.
Children and cookies
ReinMaths is used by children, and the ICO’s Age Appropriate Design Code applies to us. So the defaults are set at their most protective, and we do not use cookies to profile children or to keep them on the service longer than they meant to stay.
The cookie choice is written plainly enough for a child to follow, and refusing is exactly as easy as accepting. If you are under 13, ask a parent or guardian before you choose, and they can change the setting for you at any time. There is no advertising on ReinMaths, so nothing here is used to target a child with ads.
Changes to this policy
We will update this policy when the cookies we use change, when a supplier changes theirs, or when the law does. The date at the top of the page shows when it was last revised.
If we want to use a new category of cookie, or to use an existing one for a materially different purpose, we will ask for your consent again rather than rely on a consent you gave for something else.
How to contact us
For questions about this policy or about the cookies we use:
- Email:info@reinmaths.co.uk
- Company: ReinMaths Limited, registered in England and Wales, company number 17426840
- Registered office: 38 Whalley Road, Clitheroe, BB7 1AW, Lancashire, England
Cookie rules under PECR are enforced by the Information Commissioner’s Office, and you can complain to them at ico.org.uk/make-a-complaint or on 0303 123 1113.