Cookies Policy, Mentorly

Cookies Policy

Effective April 28, 2026 · Version 1.0

Mentorly uses a small, deliberately minimal set of cookies and browser storage. We do not use behavioural-advertising cookies, session-replay tools, or third-party analytics pixels.

1. What Cookies Are

A cookie is a small text file a website stores on your device. "Local storage" is a similar mechanism in your browser that holds slightly larger pieces of data. Both are read by the website on subsequent visits to remember information about your session or preferences.

2. Categories We Use

Strictly Necessary, required to operate the Platform (sign-in session, CSRF protection, bot mitigation). Cannot be disabled without breaking the service.
Functional, remember your preferences (theme, dismissed banners). You may clear them from your browser at any time.
Bot protection, Cloudflare cookies that prevent automated abuse of public submission forms.

3. Full Cookie & Storage Table

Name	Type	Purpose	Expiry
session	Strictly Necessary · httpOnly cookie	Authenticated session token (hashed). Required for sign-in.	30 days, refreshed on use
csrf_token	Strictly Necessary · cookie	Cross-site request forgery protection on form submissions.	Session
theme	Functional · localStorage	Stores light/dark theme preference.	Until cleared
mentorly:terms-banner-dismissed:v1	Functional · localStorage	Remembers that you dismissed the top-of-page Terms acknowledgement banner.	Until cleared
reports_tos_ack	Strictly Necessary · cookie	Records acceptance of the Watchlist/Community TOS, required to submit a report.	Until TOS version changes
cf_clearance / __cf_bm	Strictly Necessary · Cloudflare	Cloudflare bot/abuse protection on /apply and /reports forms.	Up to 30 minutes (cf_bm) / 1 year (cf_clearance)

4. Third-Party Cookies

Stripe and Stripe Identity may set their own cookies when you interact with their hosted billing or verification pages. Those cookies are governed by Stripe's policies (stripe.com/cookies-policy/legal). Mentorly does not embed Stripe's tracking on the rest of the Platform.

5. How to Manage Cookies

You can clear or block cookies and local storage in your browser settings. Note that disabling strictly-necessary cookies will break sign-in. The dismissible top banner uses localStorage to avoid showing twice, clearing site data will make it appear again.

6. No Behavioural Advertising

We do not use Google Analytics, Facebook Pixel, TikTok Pixel, LinkedIn Insight, or any other behavioural-advertising tracker. We do not sell or share personal information for cross-context behavioural advertising under the CCPA/CPRA.

7. Changes

If we add a new cookie we will update this page and bump the version. Material additions (e.g. introducing analytics) will be announced on the Platform at least 14 days in advance.