Cookie Policy

2. What cookies are

Cookies are small text files stored on your device when you visit a website. They let a site recognise your device between page loads and visits, which is what makes staying signed in, keeping your language and protecting your session possible.

A cookie may hold a unique identifier, an authentication token, a preference such as language, session information, or a record of your consent choices. Cookies do not give us access to the files on your device, and they cannot run programs or carry viruses.

Cookies are either session cookies, which are deleted when you close your browser, or persistent cookies, which remain for a defined period or until you delete them.

3. The cookies we use

The following are set by Capital Academy. All of them are strictly necessary or functional: none of them profile you or follow you across other websites.

Session cookie: essential

Keeps you signed in and links your browser to your authenticated session. Without it you cannot log in or reach anything behind your dashboard. In production it may be scoped to capitalacademy.ai and its subdomains so a single sign-in works across our services. Expires when the session ends or the token expires.

CA-LOCALE: functional

Remembers the interface language you last chose so we can return you to it. Persistent.

CA-REF-CODE: functional

Stores a partner or affiliate referral code when you arrive through a partner link, so the referral can be credited correctly if you later subscribe. Persistent, and limited to the attribution window published in our Influence Network Terms.

Security and anti-abuse

Short-lived values used for request verification, session integrity and rate limiting, which protect your account and the platform against fraud and automated abuse.

Consent record

Where a consent banner applies to you, a record of the choices you made, so we do not ask again on every visit and can evidence your choice.

4. Third-party technologies

A few providers we rely on may set their own cookies or use similar storage when you interact with the features they power. Each is subject to its own privacy and cookie notice.

Payment processors

Set during checkout and payment. Our payment processors use them for payment processing, fraud detection and compliance. They are necessary to take payment securely.

Video hosting provider

Set when a protected video lesson loads. They support playback, streaming quality and playback position.

Bot-protection service

Used on the registration and contact forms to distinguish real people from automated abuse. The service may set cookies or read existing ones as part of that check.

Error-monitoring service

Captures technical error reports so we can diagnose faults. It records diagnostic context rather than tracking your browsing.

We do not permit these providers to use information gathered through our services to build advertising profiles about you.

5. What we do not use

We also do not currently run third-party web analytics products on our learner platform. Where we measure how the platform is used, we do it with our own service logs and learning-progress data described in the Privacy Policy, not by handing your browsing behaviour to an analytics vendor.

If this ever changes, for example if we introduce an analytics or marketing technology, we will update this policy, list the technology here, and ask for your consent first where the law requires it.

6. Similar technologies

Some functions rely on storage and identifiers that are not strictly cookies but work in a comparable way.

Local and session storage

Used in your browser to hold interface state (such as your place in a lesson, player preferences, draft answers and cached data), so the platform is responsive and you do not lose your position.

Device fingerprint

A technical signature of your browser and device, generated when you open protected media. It binds a media access token to your session so protected videos and books cannot be shared or replayed elsewhere. It is used for content protection, not advertising.

Signed media tokens

Short-lived credentials issued when you open a protected video, book or audio file. They expire quickly and are tied to your session.

Server and security logs

Records of requests, including IP address and device information, kept for security monitoring, fraud prevention and fault diagnosis.

7. Why we use them

Taken together, these technologies let us:

• authenticate you and keep you signed in securely
• protect your account and the platform from fraud and automated abuse
• remember your language and interface preferences
• keep your place in a lesson, book or podcast
• deliver protected video and reading material and prevent unauthorised copying
• take payment securely
• credit partner and affiliate referrals correctly
• diagnose errors and keep the service reliable
• record your cookie choices where a consent banner applies

8. Consent

Strictly necessary cookies are set on the basis of our legitimate interest in delivering a secure, working service. They do not require consent, because the service cannot function without them.

Where the law applicable to you requires consent for non-essential technologies, we ask for it before those are set, and you can change or withdraw your choice at any time. Withdrawing consent does not affect anything done before you withdrew it.

Because we do not use advertising or third-party marketing trackers, the consent choices we ask of you are deliberately narrow.

9. Managing cookies

9.1 Your options

You can manage cookies through the consent controls we provide where they apply to you, and through your browser settings. Every major browser lets you view and delete existing cookies, block cookies from specific sites, block third-party cookies, or clear cookies when you close the browser.

9.2 What happens if you block them

Blocking essential cookies will prevent you from signing in and using the platform at all. Blocking functional cookies means your language may reset on each visit, a partner referral may not be credited, and some interface preferences will not persist. Blocking third-party cookies may prevent video playback, checkout or form submission from working.

9.3 Do Not Track

There is no common industry standard for how a website should respond to a browser Do Not Track signal, so we do not currently respond to it. This makes no practical difference here, since we do not track you across other websites in any case.

10. How long they last

Session cookies are deleted when you close your browser or when your session ends. Persistent cookies remain for a defined period appropriate to their purpose (a language preference lasts longer than a security token), or until you delete them.

Authentication and security values are deliberately short-lived and rotate regularly. Referral attribution is limited to the window published in our Influence Network Terms. You can delete any cookie at any time through your browser.

11. Changes to this policy

We may update this Cookie Policy to reflect changes in the technologies we use, new features, changes to our providers, or changes in law or regulatory guidance.

The current version is always published on this page with its effective date. If we introduce a technology in a new category (analytics or marketing, for example), we will list it here and seek your consent where the law requires it before it is used.

12. Contact us

If you have a question about this policy or about how we use cookies, get in touch.

Cookie and privacy questions

support@capitalacademy.ai

Controller

Capital Academy Tech Ltd., Gate Avenue, Level 1, Dubai International Financial Centre, Dubai, United Arab Emirates