Cookie Policy | Axiom VCE

Overview

Cookies are small pieces of data stored by a browser and sent with later requests. Similar browser technologies, such as local storage, can keep information on your device without sending it automatically with every request.

Axiom uses these technologies to authenticate users, recognise anonymous sessions, protect the Service, remember preferences, and restore unfinished work. We do not use advertising cookies or cross-site advertising pixels. We use Google Analytics to understand how the Service is used.

Axiom’s first-party cookies are essential to authentication, security, or service delivery, except for the Google Analytics cookies described below. Vercel Web Analytics is configured as cookie-free analytics.

Cookies we use

Cookies used by Axiom
Cookie or category	Provider	Purpose	Typical duration
Supabase authentication cookies	Axiom / Supabase	Maintain and refresh a signed-in session and protect authenticated routes	Session-dependent and refreshed while signed in
`axiom_anon`	Axiom backend	Signed anonymous identifier used to enforce fair-use and rate limits without an account	Up to 7 days
Security and challenge cookies	Cloudflare and protected service endpoints	Bot detection, fraud prevention, network security, and challenge completion	Usually session-based or short-lived; provider-controlled
`_ga` `_ga_<ID>`	Google Analytics	Distinguish visitors and sessions to produce aggregated usage statistics	Up to 2 years

Cookie names can be split into multiple chunks or changed by a provider as its software evolves. The purpose and category above are more stable than a complete list of generated cookie names.

Local browser storage

Axiom uses local storage on your device for the following functions:

Local browser storage used by Axiom
Key	Contents and purpose	Removal
`axiom_anon_token`	Signed anonymous-session token used when a browser blocks the backend’s cross-site cookie	Cleared on logout or by clearing site data; the server rejects stale tokens
`axiom_wip` `axiom_retry_wip`	Unsubmitted typed work, canvas strokes, graph strokes, and related question state for practice and history retries so work can be restored	Cleared after submission, exit, discard, replacement, or clearing site data
`axiom.userPrefs.v2`	Theme, font size, pen settings, accessibility and practice preferences	Updated when preferences change and cleared on logout or when site data is cleared
`axiom-practice-last-type`	The last selected practice mode	Until replaced or site data is cleared

Work-in-progress data remains on the device and is not submitted to Axiom until you submit an answer. Anyone with access to the same browser profile may be able to inspect local storage, so avoid using a shared device for information you consider private.

Analytics and similar technologies

Google Analytics measures how visitors use Axiom, such as pages viewed, session length, approximate location, device and browser type, and referring site. It sets the first-party cookies listed above. We have disabled Google signals and ad-personalisation signals, and we do not send Google your Axiom account ID, email address, answers, grades, or message content. Google processes this information under its own privacy policy.

Vercel Web Analytics measures visits using a daily, privacy-oriented request hash rather than an analytics cookie. Vercel Speed Insights measures page performance and Core Web Vitals. We do not intentionally send these tools your Axiom account ID, email address, answers, grades, or message content.

These services communicate through same-origin Vercel endpoints and may use request data such as the page visited, referrer, browser, device type, approximate country, and performance timings. Axiom does not currently use advertising pixels or track your activity across unrelated websites.

Third-party services

If you open Stripe Checkout or the Stripe billing portal, or authenticate with Google or Microsoft, you leave Axiom and interact with that provider. Those providers may use their own cookies under their privacy and cookie policies. Their cookies are not controlled by this Axiom policy.

Cloudflare Turnstile may store or read limited challenge information needed to distinguish legitimate users from automated traffic. Rejecting or blocking those technologies may prevent signup or other protected actions.

Your controls

You can delete or block cookies and local storage through your browser settings. Blocking essential authentication or security storage can sign you out, reset anonymous usage state, prevent protected forms from working, remove preferences, or delete unfinished work.

Axiom does not currently offer a separate preference centre. You can block Google Analytics cookies through your browser settings, or install Google’s Google Analytics opt-out browser add-on, without affecting how Axiom works. We do not set advertising cookies. If we introduce further optional cookies, we will update this policy and provide any consent controls required by applicable law before using them.

Policy updates

We update this policy when our use of cookies, browser storage, or similar technologies changes. The effective date at the top identifies the current version. Material changes will be notified as described in our Privacy Policy.

Contact us

Questions about cookies or browser storage can be sent to support@mail.axiomvce.com.

BLOOMFORGE PTY LTD
433 Collins Street
Melbourne VIC 3000
Australia