Cookie Policy
Effective date: August 18, 2026
What cookies are
Cookies are small text files stored on your device when you visit a website. They let sites remember your choices (like being signed in) across pages and visits. Similar technologies such as localStorage serve the same purpose.
Cookies we use
LeaPrep uses strictly necessary storage, plus advertising and analytics categories that are on by default. Press Reject on the cookie banner and we switch both off. Details in the table and the sections below.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| leaprep-auth-token | Essential | Keeps you signed in between visits (JWT). | 30 days |
| leaprep-cookie-consent | Essential | Remembers your cookie-banner choice so we don't show it again. | 12 months |
| Google OAuth session | Essential (set by Google) | Only during sign-in with Google. Managed by Google. | Session |
| lp_vid | Essential | A random first-party identifier that lets us count how many people visit, without naming anyone. Never sent to a third party. | 12 months |
| _gcl_au, _gcl_aw | Advertising (set by Google Ads) | Lets us see which Google Search ad led to a sign-up or a purchase, so we can stop paying for ads that bring nobody. Not set if you press Reject. | Up to 90 days |
| _ga, _ga_<id> | Analytics (set by Google Analytics) | Counts visits and tells us which pages and traffic sources actually bring people to the site. Not set if you press Reject. | Up to 24 months |
| _fbp | Advertising (set by Meta) | Lets us see which Facebook or Instagram ad led to a sign-up. Not set if you press Reject. | Up to 90 days |
Advertising cookies
Since 4 August 2026 LeaPrep runs Google Search ads, and since 18 August 2026 Facebook and Instagram ads. We measure three events: account creation, first completed mock exam, and payment.
- These cookies are set by default. We do this because we are a small team in Vietnam paying for every click, and without measurement we cannot tell which ads are worth keeping.
- Press Reject on the cookie banner and we switch them off immediately, in the same page view. Google Consent Mode then receives only anonymous, cookie-less signals, and the Meta Pixel stops sending anything at all.
- We do not upload your email, name, or exam results to Google or Meta.
Analytics cookies
Since 17 August 2026 LeaPrep uses Google Analytics 4 to see how many people visit, which pages they read, and which sources bring them here. The same Reject button controls it: press Reject and no analytics storage is set.
Google signals is enabled. For visitors signed in to a Google account with Ads Personalization turned on, Google may associate their visit here with information held in that account — age range, gender, interest categories, and activity across their devices. We only see aggregated reporting; we never receive anything that identifies an individual. To stop this everywhere, turn off Ads Personalization at myadcenter.google.com, or install the Google Analytics Opt-out Add-on.
Cookies we do NOT use
- No advertising or analytics tools beyond Google Ads, Google Analytics, and the Meta Pixel described above.
- No session-replay or heatmap tools (no Hotjar, FullStory, Clarity).
- No selling or sharing of personal data with data brokers.
If we add another non-essential cookie in future, we will update this page and say so on the cookie banner.
How to manage cookies
- Browser settings: you can clear or block cookies via your browser. See aboutcookies.org for instructions per browser.
- In LeaPrep: sign out to clear the auth cookie. Deleting the
leaprep-cookie-consentcookie will make the consent banner appear again on your next visit. - Note: blocking essential cookies will prevent you from staying signed in.
Changes
When we add or remove a cookie, we update this page and (for non-essential cookies) re-prompt you via the banner.
Contact
Questions: contact@leaprep.com.