Privacy-first approach
We minimise cookie usage and never track you across websites or build advertising profiles. We use strictly necessary cookies to keep the Platform running, and optional analytics cookies only with your explicit consent. We also use Sentry for error monitoring to keep the Platform stable.
Company
MasaOra Ltd
Trading as AtlasOra
Registered Office
128 City Road, London
EC1V 2NX, United Kingdom
Our Approach to Cookies
1.1We believe in a privacy-first approach. We respect your right to browse the internet without being tracked, profiled, or followed by advertising networks.
1.2We do not use marketing cookies, advertising cookies, or tracking pixels of any kind. We do not track you across websites. We do not build advertising profiles. We do not share your browsing behaviour with third parties for marketing purposes.
1.3The cookies we use on the Platform fall into two categories: (a) strictly necessary cookies, which are essential for the Platform to function correctly and cannot be switched off; and (b) optional analytics cookies (Google Analytics), which are only placed on your device if you give explicit consent via our cookie banner.
1.4Strictly necessary cookies are exempt from consent requirements under the Privacy and Electronic Communications Regulations 2003 (PECR) and the ePrivacy Directive pursuant to Regulation 6(4) of PECR. Optional analytics cookies are only set after you have given your explicit, informed consent, in compliance with PECR and the UK GDPR.
1.5We also use Sentry, an error-monitoring service, to detect and fix bugs. Sentry does not set cookies but does collect technical data (see Section 3A below).
What Are Cookies?
2.1Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function, to improve efficiency, and to provide information to site operators.
2.2Cookies can be session cookies (which are deleted when you close your browser) or persistent cookies (which remain on your device for a set period or until you delete them).
2.3Cookies can be first-party cookies (set by the website you are visiting) or third-party cookies (set by a different domain, typically through a service embedded in the website).
Strictly Necessary Cookies We Use
3.1The following table lists the strictly necessary cookies used on the Platform. These are the only cookies we set or permit to be set. Each is required for the Platform to function correctly.
sb-access-tokenFirst-partyProvider
Supabase
Type
Session
Duration
1 hour
Authenticates your session after login. Without this cookie, you cannot remain logged in.
sb-refresh-tokenFirst-partyProvider
Supabase
Type
Persistent
Duration
7 days
Allows your session to be refreshed without requiring you to log in again. Essential for maintaining a persistent authenticated session.
cookie_consentFirst-partyProvider
AtlasOra
Type
Persistent
Duration
12 months
Stores your acknowledgement of this Cookie Policy. Prevents the cookie notice from being shown repeatedly.
__tawk_*Third-partyProvider
Tawk.to
Type
Session / Persistent
Duration
Session / 6 months
Enables the live chat support widget to function. Maintains your chat session so you do not lose your conversation if you navigate between pages.
TawkConnectionTimeThird-partyProvider
Tawk.to
Type
Session
Duration
Session
Records the time of connection to the live chat service. Required for chat session management.
__cf_bmThird-partyProvider
Cloudflare
Type
Persistent
Duration
30 minutes
Bot management cookie used by Cloudflare to distinguish humans from automated bots. Protects the Platform from malicious traffic.
__stripe_mid / __stripe_sidThird-partyProvider
Revolut / payment processor
Type
Session / Persistent
Duration
Session / 1 year
Fraud prevention cookies set during the payment process. Required for secure payment processing and to comply with PCI DSS.
Optional Analytics Cookies (Consent Required)
3A.1The following cookies are only placed on your device if you click "Accept" on our cookie banner. If you click "Reject" or dismiss the banner without accepting, these cookies are never set and no analytics data is collected.
_gaThird-partyProvider
Google Analytics
Type
Persistent
Duration
2 years
Distinguishes unique visitors to the site. Used to compile aggregate, anonymised statistics on site usage such as page views and traffic sources.
_ga_G-6H7KHL5B3RThird-partyProvider
Google Analytics
Type
Persistent
Duration
2 years
Maintains session state for Google Analytics. Used to persist session data across page loads for aggregate traffic analysis.
3A.2We use Google Analytics solely to understand aggregate, anonymised traffic patterns (e.g. which pages are most visited, where visitors come from). We do not use Google Analytics for advertising, remarketing, or user profiling. We do not share analytics data with third parties for marketing purposes.
3A.3You may withdraw your consent at any time by clearing your cookies and reloading the site, at which point the cookie banner will reappear. You may also manage Google Analytics cookies via your browser settings as described in Section 5.
Similar Technologies (Non-Cookie Data Collection)
3B.1In addition to cookies, we use the following technology that collects data without setting cookies:
SentryThird-party serviceProvider
Functional Software, Inc. (Sentry)
Data region
EU (Frankfurt)
Purpose
Error monitoring & stability
Sentry captures application errors, performance data, and — for a sample of sessions — session replays (recordings of page interactions) to help us identify and fix bugs. Sentry does not set cookies. Data collected may include your IP address, browser type, operating system, pages visited, and details of any errors that occur. Session replays record user interactions (clicks, scrolls, navigation) for a randomly sampled 10% of sessions (100% of sessions where an error occurs). All data is processed in the EU region and is used solely for application stability and debugging. We do not use Sentry data for marketing, advertising, or user profiling.
3B.2We rely on our legitimate interest in maintaining a stable, secure Platform (Article 6(1)(f) UK GDPR) as the lawful basis for Sentry data collection. You may object to this processing by contacting us at the details provided in Section 10.
What We Do Not Use
4.1For the avoidance of doubt, we confirm that we do not use any of the following:
4.2If we ever introduce non-essential cookies in the future, we will update this Policy, implement a compliant cookie consent mechanism, and obtain your explicit opt-in consent before any such cookies are placed on your device.
How to Manage Cookies
5.1Although we only use strictly necessary cookies that are exempt from consent requirements, you retain full control over the cookies stored on your device through your browser settings.
5.2Most browsers allow you to view which cookies are stored, delete individual cookies or all cookies, block third-party cookies, block cookies from particular sites, block all cookies, and delete all cookies when you close the browser.
5.3Please note that if you block or delete the strictly necessary cookies listed in Section 3, some or all of the Platform may not function correctly. In particular, you may be unable to log in to your account, your live chat sessions may not persist between pages, and payment processing may be disrupted.
5.4For information on how to manage cookies in your specific browser, please visit:
Do Not Track Signals
6.1Some browsers transmit "Do Not Track" (DNT) signals to websites. If you have not given consent to analytics cookies, no analytics data is collected regardless of DNT signals. We do not currently alter our analytics behaviour specifically in response to DNT signals, but we honour your cookie consent choice as the primary mechanism for controlling analytics data collection.
Legal Framework
7.1This Cookie Policy has been prepared in compliance with the Privacy and Electronic Communications Regulations 2003 (PECR) as amended, the UK General Data Protection Regulation (UK GDPR) as retained in domestic law by the European Union (Withdrawal) Act 2018, and, where applicable to individuals in the European Economic Area, the ePrivacy Directive (2002/58/EC as amended by 2009/136/EC) and the EU General Data Protection Regulation (EU) 2016/679 (EU GDPR).
7.2Under Regulation 6 of PECR, consent is not required for cookies that are strictly necessary for the provision of an information society service explicitly requested by the user. The cookies listed in Section 3 fall within this exemption.
7.3The analytics cookies listed in Section 3A are not strictly necessary. We rely on your explicit, informed consent (Article 6(1)(a) UK GDPR; Regulation 6 of PECR) as the lawful basis for setting these cookies. Consent is obtained via our cookie banner before any analytics cookies are placed.
7.4Sentry error-monitoring data (Section 3B) is processed under our legitimate interest in maintaining a stable, secure Platform (Article 6(1)(f) UK GDPR). We have conducted a legitimate interest assessment and are satisfied that the processing is necessary and does not override your rights and freedoms.
7.5We have assessed each cookie against the ICO's guidance on the PECR cookie rules and are satisfied that every cookie listed in Section 3 meets the strictly necessary threshold, and that Section 3A cookies are set only with valid consent.
Relationship to Other Policies
8.1This Cookie Policy should be read alongside our Privacy Policy and our Terms of Service, both available on the Platform.
8.2Any personal data collected through cookies is processed in accordance with our Privacy Policy. For full details of how we handle your personal data, including your rights under Data Protection Laws, please refer to the Privacy Policy.
Changes to This Cookie Policy
9.1We may update this Cookie Policy from time to time. If we introduce any non-essential cookies, we will provide prominent notice and obtain your consent before doing so.
9.2The date of the most recent update is shown at the top and bottom of this document.
Contact Us
If you have any questions about this Cookie Policy, please contact us:
MasaOra Ltd
Trading as AtlasOra
128 City Road, London
EC1V 2NX, United Kingdom