Cookie Policy

This policy explains the cookies and similar technologies used by The Retention Lab, operated by Brightrock Ltd.

Cookies we set ourselves

• Authentication. Set by Supabase, our authentication provider, to keep you signed in and to protect against request forgery. Strictly necessary — the service cannot work without them, and under EU rules they need no consent.
• Short-lived connection state.When you connect YouTube or Discord we set a temporary, ten-minute cookie holding a random value, which is what stops someone else's connection attempt being attached to your account. It is deleted as soon as the connection finishes.

We set no advertising cookies, no cross-site tracking cookies, and no analytics cookies of our own — see below for how we measure usage without them.

Cookies set by embedded services

Some pages load content from other companies. When they do, those companies may set their own cookies or read existing ones, under their own policies rather than ours.

• YouTube (Google) — on pages with a video player. We embed through youtube-nocookie.com, Google's reduced-tracking host, which does not set advertising cookies until you actually press play. It is not cookie-free, and we would rather say so than imply otherwise. Governed by the Google Privacy Policy.
• Stripe — on billing and checkout pages. Stripe sets cookies it uses to detect fraud, which is a condition of processing card payments at all. Governed by the Stripe Privacy Policy.

Neither appears on pages where it is not needed. If you never open a video or a billing page, neither is ever loaded.

How we measure usage without cookies

We do want to know which parts of the lab are used. We do it without cookies and without anyone else: when you are signed in and open a page, we record your account id, the page address and the time, on our own servers.

We do not record your IP address, browser, device or where you came from, and we record nothing at all when you are signed out. No third party receives any of it, and no extra cookie is set for it — which is why there is nothing here to consent to. It is included in your data export and deleted with your account.

Managing cookies

You can block or delete cookies in your browser settings. Blocking the authentication cookies will stop you signing in. Blocking third-party cookies will not break the site, though the embedded video player may behave oddly.

Changes

If we add anything that sets a cookie, we will update this page, and where the law requires consent we will ask for it before setting anything non-essential.

Contact

Questions? business@brightrock.com. See also our Privacy Policy.