Legal
Cookie Preferences
Needs professional review
Last updated 1 August 2026
Only cookies that are strictly necessary are set by default. Everything else is opt-in and can be changed here at any time.
A cookie is a small piece of text this site asks your browser to keep and send back on the next request. This site uses very few of them, and the table below lists every single one — there is nothing set that is not on it.
1. Strictly necessary
These make the site work and cannot be switched off. They remember the language you chose in the header, the time zone you chose in the booking flow, and the choices you make on this page; they hand your reschedule link to the confirmation screen without putting it in the address bar; and they keep you signed in to the student area. None of them is used to build a profile, and none of them is shared with anybody.
2. Analytics
Off until you switch it on, and nothing is requested from Google until you do. When it is on, the measurements are aggregate: which pages are read, which programme a visitor looked at, which step of the booking flow they reached. IP anonymisation is enabled and Google’s advertising signals are switched off.
No student data can reach analytics. Every event comes from a fixed list, and its properties are filtered against a fixed list of permitted keys before the event is recorded — names, addresses, telephone numbers, message text, quiz answers and lesson notes are not on that list and are discarded rather than sent.
3. Marketing
No marketing cookie is set. The switch below records a preference — that you would not mind an occasional note by e-mail — and places nothing in your browser. It is recorded separately from every other choice, and this site sends no marketing e-mail today.
4. How long a choice lasts, and how to change it
Your choice is remembered for a year and applies across the whole site in every language. Change it whenever you like: this page, or the “manage preferences” option on the banner, and the change takes effect at once. Turning analytics off stops the scripts from loading on your next page view; clearing your browser’s cookies removes the record of the choice, and you will be asked again.
Every change is recorded against a salted hash of your network address rather than the address itself, so it is possible to demonstrate that a choice was honoured without storing anything that identifies you.
5. Related pages
The privacy policy explains what is collected everywhere else on the site, and the terms cover the lessons themselves.
Every cookie this site sets
| Cookie | What it does | How long it lasts | Category |
|---|---|---|---|
| am_locale | Remembers the language you chose in the header, so a manual choice survives your next visit. | 1 year | Strictly necessary |
| am_tz | Remembers the time zone you chose in the booking flow, so lesson times are shown in it. | 1 year | Strictly necessary |
| am_consent | Stores the three choices on this page. It is what makes “analytics off” stick. | 1 year | Strictly necessary |
| am_booking_manage | Hands your reschedule link to the confirmation screen without putting it in the address bar. Set only after you book, and not readable by scripts. | 1 day | Strictly necessary |
| authjs.session-token | Keeps you signed in to the student area or the admin panel. Set only when you sign in, and not readable by scripts. | 12 hours | Strictly necessary |
| authjs.csrf-token | Proves a sign-in form was submitted from this site and not from another one. | Until the browser closes | Strictly necessary |
| authjs.callback-url | Returns you to the page you were on before you signed in. | Until the browser closes | Strictly necessary |
| am_oauth_state | Set only inside the admin panel, for the few minutes it takes an administrator to connect a Google Calendar account. | 10 minutes | Strictly necessary |
| _ga | Google Analytics: tells one browser from another so visits can be counted. | 2 years | Analytics |
| _ga_* | Google Analytics: keeps track of a single visit. The name ends with the measurement ID. | 2 years | Analytics |
The two Google Analytics rows are set only when a measurement ID has been configured and you have switched analytics on below. Until both are true, nothing is requested from Google at all.
No marketing cookie is set. The marketing switch records a preference for occasional email and places nothing in your browser.
Over HTTPS the sign-in cookies carry a prefix: __Secure-authjs.session-token, __Host-authjs.csrf-token and __Secure-authjs.callback-url.
Strictly necessary
Session, security and your language, country and time-zone choices. These cannot be switched off.
Always on
Analytics
Anonymous, aggregated usage statistics. No lesson content or personal student details are ever sent.
Marketing
Used only if you ask to receive occasional notes by email.