Cookie Policy

Novus Learn previously carried two other advertising networks. Both were removed on 2026-07-29 — every banner, native unit, and overlay script, the publisher declarations, and their entries in the site's content-security policy. Nothing from either network is loaded, under any consent state, and an automated check fails the build if their code, hosts, or policy entries reappear.

The two active third parties in this policy are Google Analytics 4 in the Analytics category and Adsterra in the Marketing category. Google AdSense remains authorized in ads.txt for possible future use, but its script is not loaded while Adsterra is active.

The product is local-first, so almost everything it keeps is first-party browser storage that never travels: your consent record, theme and motion preferences, saved and recent topics, and your local library live in localStorage, while projects, uploads, practice history, career results, and study progress live in IndexedDB. None of it is sent with a request, none of it is readable by another site, and none of it is used for advertising or measurement.

It is described here because clearing it is what actually removes your data. The local-data control in the preference centre erases the Novus Learn records; clearing site data in your browser erases everything including consent, and you will be asked again on your next visit.

Analytics never loads anywhere until you accept it — your region does not change that. Advertising depends on where you connect from: in the EEA, the UK, or Switzerland nothing in Marketing loads until you accept it, while from other regions it loads by default and you can switch it off at any time. To tell the two apart we read the coarse country code your connection already provides to our host; it is used for this decision only and no IP address is stored or logged. The same no-store request reads Sec-GPC, and Global Privacy Control overrides saved Analytics and Marketing grants. If country or privacy-signal resolution fails, third-party loading fails closed.

A first-party local-storage record keeps your consent version and category choices. Security and delivery providers may use necessary infrastructure controls. These functions cannot be switched off through the preference centre without making the requested service unreliable.

Theme, reduced-motion, local-library, and recent-topic choices are first-party browser records created to perform actions you request. They do not create a server profile.

Google Analytics 4 measures aggregate usage in both the Novus Learn property (measurement ID G-YJTKJRMPCB) and the shared Novus network roll-up property (measurement ID G-SFESMZCD3G); it does not log IP addresses. The single shared script and its cookies load only after you accept the Analytics category, in every region. The consent gate enforces this, and Global Privacy Control overrides a saved grant. Withdrawing consent immediately denies both analytics destinations, clears applicable Google Analytics cookies, and reloads once with the gate closed.

The Marketing category covers Adsterra, the active advertising provider for the current month. In opt-in regions no advertising script or cookie is served until you accept this category; in opt-out regions it is allowed by default. Withdrawing Marketing unmounts Novus Learn's ad slots immediately and blocks new ad scripts. Global Privacy Control overrides this category. When Marketing is allowed, one disclosed sponsor tab may open for an eligible export or print gesture; the requested action still completes either way.

Open Cookie Preferences from the footer or menu at any time. Rejecting nonessential storage prevents future optional collection. Use the local-data control to clear Novus Learn browser records.