Cookie policy

Cookies are small text files that a website stores in your browser. They let a site remember things between pages and visits — for example, that you are signed in. Cookies set by the website you are visiting are called first-party cookies; cookies set by another company, such as an analytics or advertising provider, are called third-party cookies.

Similar technologies include local storage (which lets a website keep information in your browser), pixels or tags (small pieces of code that tell a provider a page was viewed), and software development kits, or SDKs (code built into mobile apps). In this policy we call all of these “cookies” unless we need to tell them apart.

Similar technologies also include reading characteristics your browser already makes available to every site — such as screen size, time zone, and graphics hardware — and combining them into a code that recognises the same browser again. We do this in exactly one place: the sign-up screen, to stop one person collecting referral bonuses repeatedly. On the web it stores nothing on your device at all; in our mobile apps we store a random identifier instead. It is described in full in our Privacy Policy under “Personal data we collect automatically”.

ClassFactor is operated by First Capital Merchant Solutions, Inc., a Florida corporation doing business as ClassFactor (“ClassFactor”, “we”, or “us”).

We group cookies into three categories. Only analytics and advertising are optional, and you control each of them separately.

Strictly necessary. These are needed for the website and web app to work and to keep them secure: keeping you signed in, remembering your privacy choices, crediting referrals, checking at sign-up whether an account was already created on the same browser or app installation, and protecting forms and checkout from bots and fraud. This category also covers storage that simply remembers settings you chose on your own device — such as view preferences and tips you dismissed — which is not used to track you. Strictly necessary cookies are always on and do not require consent.

Analytics. Google Analytics helps us understand how people use our website and web app — which pages are visited, which features are used, and where things go wrong — so we can improve them.

Advertising. Meta (Facebook and Instagram) and TikTok pixels help us measure which of our ads bring people to ClassFactor, and help those platforms show our ads to people likely to be interested. This category also covers the campaign attribution cookie described below, and the trial and purchase events we send to Meta and TikTok from our servers. Under US state privacy laws, advertising measurement like this is considered “sharing” personal information for cross-context behavioral advertising, or “targeted advertising”, even though no money changes hands. We do not sell your personal information for money.

We never send your study content — your uploads, generated material, AI conversations, or scores — to analytics or advertising providers.

Where you are. We use your IP address to detect the country you are visiting from. Our hosting provider determines the country, and we store it in the cf_region cookie described below. We do not determine your precise location.

United States. If you are visiting from the United States, analytics and advertising are on by default. We show you a notice, and you can turn either one off at any time.

Everywhere else. If you are visiting from anywhere else — including the European Economic Area, the United Kingdom, Switzerland, Canada, and Australia — or if we cannot tell where you are, analytics and advertising stay off, and their cookies and pixels do not load, until you opt in.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we turn off both analytics and advertising before they load, wherever you are. The signal takes priority over the United States default.

One choice for both sites. Your choice is saved in a cookie on the classfactor.com domain, so it applies to both www.classfactor.com and app.classfactor.com in the same browser. If you clear your cookies, or use a different browser or device, you will be asked again there.

Each item below is listed as: name — provider — purpose — category — duration. Durations are the maximum time the cookie stays in your browser unless you delete it sooner. Third-party providers may change the names or durations of their own cookies.

better-auth.session_token and related sign-in cookies — ClassFactor — keep you signed in and protect your session — strictly necessary — up to 30 days.

cf_consent — ClassFactor — stores your analytics and advertising choices — strictly necessary — 1 year.

cf_consent_notice — ClassFactor — records that the United States privacy notice has been shown to you, so it is not shown again — strictly necessary — 1 year.

cf_region — ClassFactor — stores your country code so we can apply the right consent default — strictly necessary — 30 days.

cf_ref — ClassFactor — stores the referral code you arrived with, so the person who invited you can be credited when you sign up — strictly necessary — 30 days.

cf_attr — ClassFactor — stores first-touch campaign information: campaign (“utm”) parameters, the referring page, the page you landed on, and Meta or TikTok ad click identifiers — advertising — 90 days. This cookie is set only when you have allowed analytics or advertising; if you have turned both off, it is not set.

_ga and _ga_* — Google — Google Analytics: distinguishes visitors and sessions so we can measure usage — analytics — up to 2 years.

_fbp and _fbc — Meta — Meta pixel: identifies browsers and records ad clicks so Meta can measure and improve our ads — advertising — about 90 days.

_ttp — TikTok — TikTok pixel: identifies browsers so TikTok can measure and improve our ads — advertising — about 13 months.

Cloudflare Turnstile — Cloudflare — checks that a real person, not a bot, is submitting forms and signing in — strictly necessary — for the duration of your browser session.

__stripe_mid and __stripe_sid — Stripe — fraud prevention on checkout pages — strictly necessary — up to 1 year (__stripe_sid lasts a much shorter time).

Local storage in the web app — ClassFactor — remembers view preferences, tips you have dismissed, a shared link you opened before signing in so it can be added to your account, and onboarding answers you have not finished submitting — strictly necessary — stays on your device until you clear it or the item is no longer needed. This information stays in your browser and is not used to track you.

Some advertising measurement cannot happen in a browser. A free trial may convert to a paid subscription days after the visit that led to it, when you are not using ClassFactor and no pixel can record it. So when a trial starts or a subscription payment succeeds, we report that event to Meta (through its Conversions API) and TikTok (through its Events API) directly from our servers.

Each event contains the event type, the plan and amount, the ad click identifiers and pixel cookie values from your first visit, the IP address and browser description recorded when you signed up, and your email address in hashed (one-way encoded) form. It never contains your study content. The Privacy Policy (/privacy) describes these events in more detail.

These events are part of the advertising category and are covered by the same choice. We send them only if the advertising choice recorded with your account allows it. If you are signed in to the web app when you turn advertising off, we update that record and stop sending the events.

Because these events do not rely on cookies, blocking or deleting cookies in your browser settings will stop the pixels but will not, on its own, stop server-side events. To stop both, turn advertising off using the “Your privacy choices” controls at the bottom of this page, or use a browser that sends Global Privacy Control.

Our iOS and Android apps do not use cookies for tracking and do not include advertising pixels.

The apps keep your sign-in token and app preferences in your device’s secure storage, which is strictly necessary for the apps to work.

The apps include SDKs for push notifications (Expo, Apple, and Google Firebase Cloud Messaging), error reporting (Sentry), app updates (Expo), and analytics (Google Firebase Analytics). Firebase Analytics is switched off until you agree to analytics in the app.

The apps do not collect advertising identifiers such as Apple’s IDFA or Google’s Advertising ID, and they do not track you across other companies’ apps or websites.

Consent banner. When we need to ask or notify you, a banner lets you make your choice.

Your privacy choices. The controls at the bottom of this page let you turn analytics and advertising on or off at any time. Changes take effect immediately and apply across classfactor.com. You can reach these controls from the “Your privacy choices” link in the footer of our website. In the United States, turning advertising off is your opt-out of the sale or sharing of personal information and of targeted advertising.

Global Privacy Control. Turning on GPC in a browser or extension that supports it turns off both analytics and advertising on our sites.

Browser settings. Most browsers let you block or delete cookies and clear local storage. If you block strictly necessary cookies, parts of ClassFactor, such as staying signed in, will not work. Remember that browser cookie settings alone do not stop server-side advertising events.

Provider tools. Google offers a browser add-on to opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout. You can manage how Meta uses your information for ads at https://www.facebook.com/adpreferences. You can manage TikTok ad personalization in the ad settings of the TikTok app. These tools are provided by those companies and work separately from your choices on ClassFactor.

Mobile apps. You can change your analytics choice in the app, and control push notifications and other permissions in your device settings.

We may update this Cookie Policy when we change the cookies we use or when the law changes. When we do, we will update the date at the top of this page. If we add a new category of optional cookies, we will ask for your choice again where the law requires it.

If you have questions about this Cookie Policy, email support@classfactor.com or write to First Capital Merchant Solutions, Inc. d/b/a ClassFactor, 10001 NW 50th St, Ste 114, Sunrise, FL 33351-8087, USA. For more about how we handle personal data, see our Privacy Policy (/privacy).