Legal
Cookie Policy
This Cookie Policy explains how INTOOLA LLC ("Intoola," "we," "our," or "us") uses cookies and similar technologies - such as browser local storage, session storage, and IndexedDB - on the intoola.com website, including the Intoola Study pages, the Intoola Recruit pages, and the signed-in Recruit web application at intoola.com/recruit. It should be read together with our Privacy Policy and the Recruit Privacy Policy, which explain what personal information we collect and why.
This policy is based on how the website is actually built today. It does not cover the Intoola Study or Intoola Recruit Chrome extensions, which do not set cookies on websites you visit; the browser storage they use on your device is described in their own privacy policies.
1. What are cookies and similar technologies?
Cookies are small text files that a website places on your device. Similar technologies - local storage, session storage, and IndexedDB - let a website save information in your browser in the same way. In this policy, "cookies" means all of them unless we say otherwise. Some are set by Intoola ("first-party"); others are set by a service we use ("third-party"). Some last only until you close the tab ("session"); others last until they expire or you delete them ("persistent").
2. How we classify them
- Strictly necessary - needed to provide something you asked for, such as signing in, security, paying for a subscription, or remembering your cookie choice. These do not require consent and cannot be switched off in our settings, though you can block them in your browser (parts of the site will then not work).
- Functional - remember choices or context you have given us, such as display preferences, or the partner link you arrived from so its discount can be applied.
- Analytics - help us understand how the website is used so we can improve it.
- Marketing / advertising - used to show or measure advertising. Intoola does not currently use any advertising or marketing cookies or pixels. The category appears in our settings so your choice is recorded if that ever changes; we would update this policy first.
3. Your choices and consent
If you visit from the European Economic Area, the United Kingdom, or Switzerland (as detected from your browser's time zone and language settings), we show a cookie notice the first time you visit. Until you choose, only strictly necessary technologies are used: no analytics code is loaded, no Google Analytics cookies are set, and optional categories are switched off. The notice offers Reject non-essential, Manage preferences, and Accept all, which have equal prominence. In Manage preferences you can allow Functional, Analytics, and Marketing separately; none is pre-selected.
Elsewhere, the website keeps its existing behavior (analytics on) and you can switch any optional category off at any time.
You can review, change, or withdraw your choice at any time using Cookie Settings in the footer of every page (in the Recruit web app, in the left-hand menu). Withdrawing analytics consent stops analytics collection immediately and deletes the Google Analytics cookies and Firebase installation record that this site created in your browser. We store your choice in your browser (see the table below) and ask you again after 12 months, or if we make material changes.
Because location is estimated from your browser settings, it may not always match where you actually are. If you are in a region with consent requirements and no notice appears, you can still open Cookie Settings from the footer.
4. Cookies and similar technologies we use
The table below lists what the intoola.com website uses, based on our current code and on the documented behavior of the services we integrate. Durations for third-party items are those documented by the provider and may change.
| Name / location | Provider | Purpose | Category | Duration | ||
|---|---|---|---|---|---|---|
intoola_consent_v1 (local storage) | Intoola (first-party) | Remembers your cookie choices. | Strictly necessary | Up to 12 months, then we ask again | ||
Firebase Authentication session (IndexedDB database firebaseLocalStorageDb; may also use local storage) | Google Firebase, stored on intoola.com | Keeps you signed in to My Materials (Study) and to the Recruit web app. Created only when you choose to sign in. | Strictly necessary | Until you sign out or clear site data | ||
recruitKnownAccount (local storage) | Intoola (first-party) | Remembers that this browser has signed in to Recruit before so we can reconnect you. | Strictly necessary | Until you sign out or clear site data | ||
intoola_recruit_draft_v1_*, intoola_recruit_prep_ctx_v1_*, intoola_recruit_prep_v1_*, recruit_referral_agreement_v1_* (local storage) | Intoola (first-party) | In the signed-in Recruit app: keeps work you are in the middle of (form drafts, practice-session context and history) and records that you accepted the Referral Program Terms. | Strictly necessary (feature you requested) | Until you delete the item, sign out, or clear site data | ||
recruit-track-group, recruit-track-organize (local storage) | Intoola (first-party) | Remembers how you chose to group and sort your tracking list. | Functional | Until you clear site data | ||
intoola_partner_attribution_v1 (local storage) | Intoola (first-party) | If you arrive through a partner link such as intoola.com/recruit?ref=tig, remembers the partner name, channel, landing page, and first-visit time so the partner's discount can be applied at checkout and the partnership can be measured. See Section 6. | Functional | Up to 90 days | ||
intoola_partner_landing_logged (session storage) | Intoola (first-party) | Avoids counting the same partner-link visit twice in a browser session. | Functional | Until the tab or browser session ends | ||
intoola_promo_midterm_dismissed (session storage) | Intoola (first-party) | Remembers that you closed the site's promotional banner. | Functional | Until the tab or browser session ends | ||
recruit_checkout_pending_v1 (local storage) | Intoola (first-party) | When you start a Recruit checkout, notes it so that the purchase can be counted in analytics when you return from payment. Only set if analytics is allowed. | Analytics | Removed when you return from checkout; discarded after 24 hours | ||
_ga (cookie) | Google (Google Analytics 4 via Firebase Analytics), set on intoola.com | Distinguishes visitors so usage can be counted. | Analytics | Up to 2 years | ||
_ga_KT2XRDKFR8 (cookie) | Google (Google Analytics 4 via Firebase Analytics), set on intoola.com | Maintains session state for analytics. | Analytics | Up to 2 years | ||
Firebase installations record (IndexedDB database firebase-installations-database) | Google Firebase, stored on intoola.com | Identifies the browser installation to Firebase Analytics. | Analytics | Until you withdraw consent or clear site data | ||
Firebase heartbeat record (IndexedDB database firebase-heartbeat-database) | Google Firebase, stored on intoola.com | Records which Firebase SDK version is in use when Firebase services are called. | Analytics (also created if you sign in) | Until you withdraw consent or clear site data |
Items marked Analytics are created only after you allow analytics (in regions that require consent), and are removed if you later withdraw it.
5. Third-party services that may set their own technologies
- Google sign-in. When you choose "Continue with Google," a Google sign-in window or redirect opens. Google and Firebase may set or read their own cookies on google.com and related domains. We do not control them; see Google's Privacy Policy.
- Stripe. Payments are made on pages hosted by Stripe (checkout.stripe.com and Stripe's billing portal). Intoola does not embed Stripe's scripts on intoola.com. Stripe sets its own cookies and similar technologies on its pages to process payments and prevent fraud; see Stripe's Cookie Policy and Privacy Policy.
- Google Analytics / Firebase. Google's own terms govern how Google processes analytics data; see How Google uses information from sites or apps that use our services.
- Hosting and infrastructure. intoola.com is served by Firebase Hosting, and our application programming interface runs on Cloudflare Workers. These providers process technical request data (such as IP addresses) as part of delivering the service and may use security mechanisms of their own; we do not use them to set tracking cookies.
We do not use advertising networks, social-media tracking pixels, session-replay tools, or A/B-testing cookies.
6. Referral, UTM, and partnership attribution
Some links to intoola.com carry a referral parameter that tells us where a visitor came from. For example, our partnership with TIG uses https://intoola.com/recruit?ref=tig. We treat it as equivalent to utm_source=tig, utm_medium=partnership, and utm_campaign=tig_recruit_20.
When you arrive through a recognized partner link we:
- remember the partner, channel, landing page, and time of your first visit in your browser (the Functional item above) so a partner discount you followed the link for can be applied if you later subscribe. If you have not allowed Functional storage in a region that requires consent, the referral is held only in memory for the page you are on, so the discount may not carry across pages;
- if analytics is allowed, send analytics events (such as a partner-link landing, a checkout start, and a completed subscription) labeled with the partner identifier and the campaign values above; and
- if you start a Recruit checkout, send the partner identifier to our server, which checks it against our own list of recognized partners before applying any discount, and then records the partner, channel, and discount on your Stripe checkout, customer, and subscription records and in our own database so we can validate the promotion and measure results.
Unrecognized ref values are ignored and are not stored. Browser-stored partner information cannot create a discount; eligibility is always checked by our server. Intoola does not give TIG access to your name, email address, payment details, account, or browsing activity through these cookies. See the Recruit Privacy Policy for details.
7. How to control cookies in your browser
Besides Cookie Settings, most browsers let you view, block, and delete cookies and site data (for example in Chrome: Settings > Privacy and security > Third-party cookies / Delete browsing data; similar menus exist in Safari, Firefox, and Edge). You can also use a browser's private mode, which clears storage when you close it. Google offers a browser add-on to opt out of Google Analytics.
If you block or delete strictly necessary storage, you may be signed out, your in-progress Recruit drafts may be lost, and some features (sign-in, checkout, saved preferences) may not work. If you decline Analytics or Functional storage, the website still works; we simply collect less information and cannot remember your preferences.
Our systems do not currently respond to browser "Do Not Track" or Global Privacy Control signals; your choices in Cookie Settings are what we apply.
8. Changes to this Cookie Policy
We may update this policy when our website, our providers, or the law change. We will update the "Last Updated" date and version above and, if the change affects what needs your consent, ask for your choice again.
9. Contact
Questions about this policy or your choices can be sent to info@intoola.com. For how we handle personal information more generally, see our Privacy Policy and the Recruit Privacy Policy.
This policy describes Intoola's practices as of the Last Updated date above and does not constitute legal advice.