Cookie Policy

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as browser local storage and session storage to keep you signed in and remember your preferences, and to keep a route you choose to save from our ITIN checker.

2. Why we use cookies

We use cookies and similar technologies to:

• Keep you securely signed in across page loads and browser sessions
• Remember your language preference and UI settings
• Remember how you first arrived at our site, only if you allow it (Analytics, below)
• Keep a route you choose to save from our ITIN checker on your device (Privacy Policy, Section 2.3)

We don't use advertising or retargeting cookies, no advertising network's tag or pixel runs on our site, and we never report your visit or your account to an advertising network. We do not sell data to advertising networks.

3. Types of cookies we use

• Strictly necessary — Required for authentication and security. These include session tokens managed by Supabase (our database and auth provider). You cannot opt out of these while using the platform. Our hosting provider's network, Cloudflare, sets a security cookie named __cf_bm, which expires after 30 minutes without activity, to tell people from automated traffic. When a page opens, our hosting provider also sets a cookie named __dpl, which expires after 7 days; it holds a code that is the same for every visitor, the time it expires and a signature. Your choice in Cookie Settings is kept in this browser too.

• Analytics — If you turn on Analytics in Cookie Settings (Accept All does that) and your browser doesn't send Global Privacy Control, we keep in this browser how you first arrived at our site, and when: the labels the link carried (its source, medium and campaign), whether it came from a Google ad, the kind of site that sent you (a search engine, an AI assistant, a social network or messaging app, or another site) and the type of the first page you opened.

  For a link printed in materials from a community organization, we keep only that it was such a link, never which organization, what kind it is or which page it opened.

  This record is sent to us, without the date, only if you create an account in this browser: when you sign in, after which it is removed from the browser. If it is never sent, it is removed the next time you open our site after 90 days (or 7 days after you sign up).

  For the current tab only, we also keep the labels of the link that opened it; they go to our newsletter provider only if you subscribe.

  We also count our checker's results, the routes saved from it and later visits to a saved route. These records never include your answers, your route or its link; Section 2.3 of our Privacy Policy says what each one holds.

  When you're signed in, we also note which lessons you open and which learning buttons on your dashboard you press, with a random code for the tab, and which card's "View on issuer's site" button you press, so we can see how they're used and correct problems. These notes are kept with your account: turning Analytics off stops new ones, and they are deleted when you delete your account.

  Until you choose, nothing is stored; if you then accept, we keep how you arrived on that visit. Choosing Decline, or turning Analytics off, removes all of it from this browser.

• Functional — Your selected language, the prompts you've closed and page settings (like an open side panel) are kept across visits. For the current tab only, we keep your answers in our ITIN and no-SSN card checker, so the steps after you sign up don't ask again, and which ID number you have; we don't save that answer to your account.
• Saved by you — If you save a route from our ITIN and no-SSN card checker, your answers and your route are kept in this browser's local storage. Nothing is kept until you press a save button, and none of it is sent to us. It stays until you remove it or clear this site's data; 210 days after the route's date, it is removed the next time you open our site. Choosing Decline doesn't remove it: it isn't a preference, it is something you asked us to keep.

4. Your choices

• Cookie Settings — Turn Analytics on or off at any time with the Cookie Settings button at the bottom of every page. Turning it off removes what Analytics kept in this browser.
• Browser settings — Most browsers let you view, block, or delete cookies. If you block cookies and other site data for our site, you can't sign in, because our site needs this browser's local storage.
• Local storage — You can clear local storage via your browser's developer tools (Application → Local Storage). This will sign you out and reset preferences.

5. Do Not Track

Some browsers send a "Do Not Track" signal. There is no universal standard for how websites should respond, and our site does not respond to it.

We honor Global Privacy Control: if your browser sends it, we count nothing (Privacy Policy, Section 2.3).

6. Updates

We may update this policy when we add or remove third-party services. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the platform after a change constitutes acceptance of the revised policy.

7. Contact

Questions about this policy? support@venture-path.ai