Cookie Policy

Last updated: 2026-04-28

Draft. This is a working draft prepared by NILifi and reviewed by legal counsel before public launch. Questions? Email privacy@mw-creative.com.

What this covers

This policy explains how NILifi (operated by MW Creative LLC) uses cookies and similar technologies — local storage, session storage, and pixels — on our website and in the application. Read it alongside our Privacy Policy for the full picture.

What is a cookie?

A cookie is a small text file that a website places on your device. Cookies let a site remember things between visits — that you’re signed in, what locale you prefer, or whether you’ve dismissed a banner. “Similar technologies” means anything that does the same job (local storage, session storage), and we treat them under the same rules.

Categories we use

Strictly necessary

These run the platform. You can’t turn them off and use NILifi normally — they keep you signed in, route you to the right language, and protect against cross-site request forgery.

Session — keeps you signed in between page loads. Cleared on sign-out.
Locale — remembers your preferred language (English or Spanish).
CSRF token — protects form submissions from cross-site forgery.
Cookie consent — remembers what you chose in our consent banner, so we don’t ask again.

Functional

Improve the experience but aren’t required. We set these only after you opt in (where required by law).

Onboarding state — remembers which onboarding step you finished, so reload doesn’t restart you.
Theme + display preferences — once we ship them.

Analytics

Aggregate, privacy-respecting analytics — we measure how the platform is used so we can improve lessons that confuse athletes and pages that lose them. We do not run cross-site tracking, do not sell to ad networks, and do not profile individuals.

Advertising

We do not run advertising cookies. We do not use student data for advertising. We do not sell, rent, or share data with ad networks.

Third-party cookies

A small number of cookies are set by our subprocessors — for example, Vercel for security and CDN routing. The complete list of subprocessors is at /legal/subprocessors. Each is bound by a Data Processing Agreement and a clear scope.

Your choices

You can control cookies in two places:

In your browser— block or delete cookies any time. Blocking strictly necessary cookies will break the platform; we’ll show a friendly error rather than silently fail.
In our cookie banner— accept all, reject non-essential, or pick categories. Your choice is remembered for one year, after which we’ll ask again.

Retention

Session cookies are cleared when you close the browser. Functional cookies persist for up to one year. Consent records are kept for the duration of your account plus the audit-log retention window described in our Privacy Policy.

Updates

We’ll update this policy when we add or remove cookies. The “last updated” date at the top of the page reflects the most recent change. Material changes will be announced in the application banner.

Contact

Email privacy@mw-creative.com with any cookie or tracking question.