What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make sites work, improve performance, and provide information to site owners. “Similar technologies” include localStorage, sessionStorage, and pixels — we use localStorage for a small set of UI preferences described below.
Cookies and storage we use
We use only cookies and storage that are strictly necessary for the operation of the Service, or that store non-personal UI preferences on your device.
a) Strictly necessary cookies
| Name | Purpose | Type | Duration |
|---|---|---|---|
| rb_session | Authenticates you after login. Holds a signed, HTTP-only JWT — no readable personal data. | HTTP-only cookie | 7 days |
Strictly necessary cookies do not require consent under the PDPA because the Service cannot function without them. Disabling them will log you out and may break the Service.
b) Local storage (non-essential)
| Key | Purpose | Storage | Contains PII |
|---|---|---|---|
| rb-last-seen-badges | Remembers which gamification badges you have already seen the “unlocked” celebration for, so we don't show the same toast repeatedly. | localStorage | No (badge IDs only) |
| theme preference | Remembers your chosen colour theme (e.g. light/dark) so the Service renders consistently between visits. | localStorage | No |
These items are functional UI preferences stored only on your device. They are not transmitted to our servers and contain no personal data.
Third-party cookies
We do not use third-party analytics, advertising networks, or social-media tracking pixels. The only third-party requests initiated by the Service are made to our backend API (/api/*) and, when you use the AI Masterclass, to our AI subprocessors (OpenRouter and Boundary ML). Those AI requests are made server-to-server and do not set cookies in your browser.
How to control cookies
You can control cookies through your browser settings. Most browsers allow you to block all cookies, block only third-party cookies, or delete cookies when you close the browser. Note that blocking the rb_session cookie will log you out and may prevent the Service from working.
To clear localStorage entries, use your browser's developer tools (Application → Storage → Clear site data) or use private/incognito browsing mode.
Browser-specific guidance: Chrome, Firefox, Safari, Microsoft Edge.
“Do Not Track” signals
We honour “Do Not Track” (“DNT”) browser signals where they are technically applicable. Because we do not use third-party tracking cookies in the first place, there is currently no behavioural tracking for DNT to opt out of. If we add analytics or marketing cookies in future, this section will be updated and the new cookies will fully honour DNT / Global Privacy Control signals.
Changes to this Policy
We will update this page whenever our use of cookies or storage changes. Material additions (e.g. introducing analytics or marketing cookies) will be announced on this page and, where required by the PDPA, we will request your prior consent before such cookies are set.
Contact us
Questions about our use of cookies? Email [email protected]. See our full Privacy Policy for data-protection rights under the PDPA.
This document is provided for informational purposes and does not constitute legal advice. Please consult a qualified Malaysian legal practitioner for binding compliance review.