Cookie policy

Current use

openskills.info does not use analytics, advertising, or profiling cookies. The application does not include Vercel Web Analytics, Google Analytics, a marketing pixel, or a consent management platform. Almost every cookie described below is strictly necessary to provide a feature you have actively requested — staying signed in, or completing a purchase you started. The one exception is theos_ref referral cookie described below, which is functional rather than strictly necessary but still involves no tracking, profiling, or third party — the site does not display a cookie-consent banner because none of this rises to what one is legally required for.

Account sign-in (Supabase)

If you log in, Supabase — our authentication provider — sets first-party cookies in your browser to keep you signed in between visits and to protect your session. These cookies are strictly necessary for the login feature you asked for. They are removed when you log out or expire on their own after a period of inactivity.

If you choose to sign in with Google or GitHub instead of an email link, that provider's own site briefly sets or reads its own cookies while you authenticate and grant consent on its domain, before redirecting you back. Those cookies are set by the provider, not by openskills.info, are outside our control, and are governed by the provider's own cookie and privacy notices (linked in the privacy policy).

Referral links

If you follow a link containing a ?ref= parameter, we set an os_refcookie recording the referrer's handle for 30 days. If you then create an account, we record who referred you, and if you complete a course, lesson, or guide, the referrer earns leaderboard points — see the leaderboard for how points work. This is the only cookie on the site that is not strictly necessary for a feature you actively requested at that moment; it exists to make referral links work when you follow one before signing up.

Subscription checkout (Paddle)

If you open the checkout to subscribe, Paddle's checkout overlay may set its own cookies or use similar browser storage — for example to prevent fraud, keep track of your progress through checkout, and determine the correct currency and tax for your location. These are set by paddle.com, not by openskills.info, and only appear once you actually open the checkout. See Paddle's own cookie policy for its current list.

Vercel hosting

The site is delivered through Vercel. Normal page delivery processes request metadata in server and security logs but does not, by itself, require a browser cookie. Depending on the deployment context and security features activated by Vercel, a strictly necessary, short-lived cookie or equivalent storage may be used to complete a security challenge, prevent abuse, balance traffic, or enable a preview feature. Such storage is used only to provide or protect a service you request and is not used by Lab42 Srl for advertising or profiling.

Third-party course icons

Some course pages retrieve a product favicon from Google. These requests are configured to omit the page referrer. They do not set a cookie for openskills.info, though Google may receive its own domain's cookies alongside the technical request described in the privacy policy.

Browser controls

You can inspect, block, or delete cookies using your browser settings. Blocking strictly necessary storage may prevent a security challenge or preview deployment from working, and will also prevent staying signed in or completing a Paddle checkout, but it does not affect ordinary course browsing under the site’s current configuration.

Future changes

If we introduce non-essential cookies or tracking technologies, we will update this notice and, where required, ask for consent before they are stored or accessed. This policy should be reviewed alongside the privacy policy.

Last updated: 20 July 2026.