Cookie Policy
Last updated 3 October 2026
This page lists everything Reach For stores on your device and why. The short version: one strictly-necessary cookie that unlocks the course, analytics that run without a cookie at all, and our payment provider’s checkout script on the public pages. No advertising and no cross-site tracking, so there is nothing here to opt in or out of, and no consent banner.
The one cookie we set
| Name | Purpose | Category | Lifetime |
|---|---|---|---|
rf_session | Holds a signed token that keeps your browser unlocked after you activate a licence key. Without it the course will not load. HttpOnly, so scripts cannot read it. | Strictly necessary | ~90 days, or until you sign out |
Because this cookie is strictly necessary to deliver a service you have asked for, no consent is required for it under UK/EU rules.
Analytics — no cookie
We use Betterlytics (EU-hosted) to see which pages and lessons get used and where people get stuck. It sets no cookie and stores nothing in your browser. Visits are counted from an anonymous hash, computed on their servers, of your shortened IP address, a rounded screen size and your browser name, with a secret that changes every day — so it can’t recognise you tomorrow, is never linked to your name, email or licence, and never follows you to another site. The data is used only to maintain and improve the course — never to profile you or to advertise. See the Privacy Policy for the legal basis and your rights.
Browser storage (not cookies)
Your browser’s local storage holds your lesson progress, your spaced-repetition review schedule and any notes you make in the cue log. This never leaves your browser except to sync to your own account across your devices. Analytics store nothing in your browser. You can clear local storage at any time from your browser settings.
Third parties
Checkout is handled by Lemon Squeezy. Their script (lemon.js) loads on our public pages so that paying opens a panel over the site instead of sending you to another domain. It is loaded from assets.lemonsqueezy.com, and any cookies or storage it sets are governed by their policy, not this one — we do not read them, and nothing it stores is used by us for analytics or advertising. It does not load inside the course itself.
The site is served by Cloudflare, which may set a strictly-necessary cookie to protect the site against abuse. We run no advertising, social, or cross-site tracking cookies.
Controlling cookies
You can block or delete cookies in your browser settings. Clearing rf_session simply signs you out — re-activate your licence key to get back in. Since analytics use no cookie, blocking cookies does not affect them; if you want to be excluded from analytics entirely, email [email protected] and we will help.
Changes
If we ever introduce a cookie that is not strictly necessary, we will add it to the table above and put a consent choice in front of you before it is set.
Contact
Questions about cookies: [email protected].