Privacy and cookies
What QubicAcademy stores in your browser and in its records, why there is no cookie banner, and how long records are kept.
Summary
QubicAcademy stores only what it needs to sign you in and remember a few choices you made. There are no analytics, advertising or tracking cookies and no third-party scripts, which is why you never see a cookie banner. Your training records belong to your organization, which keeps them for its retention period.
Why it's needed
A cookie banner exists to ask permission for storage a site does not strictly need. QubicAcademy sets nothing of that kind, so there is nothing to ask. If that ever changes, nothing new is set until you choose, and this page changes first.
Key terms
- Strictly necessary: needed for a service you asked for, such as staying signed in.
- Preference: remembers a choice you made, such as dark mode.
- Controller / processor: your organization decides what happens to your training records (controller); QubicAcademy handles them on its behalf (processor).
How it works
Everything QubicAcademy stores in your browser:
| Name | Kind | Category | What it does |
|---|---|---|---|
ql_refresh | Cookie | Strictly necessary | Keeps you signed in. HttpOnly, so script on the page cannot read it |
ql_session | Cookie | Strictly necessary | A flag that says this browser probably has a session. Holds no credential |
ql_sso | Cookie | Strictly necessary | Only while you sign in with Google or Microsoft, for ten minutes at most: ties that sign-in to this browser |
ql-activity | Local storage | Strictly necessary | Your last activity time, shared between tabs, so an idle session ends in all of them |
ql-theme | Local storage | Preference | Your light or dark choice |
ql-legal-notice | Local storage | Preference | Which "this agreement was updated" notices you closed |
ql-notice-dismissed | Session storage | Preference | Which announcement banners you closed in this tab |
What is recorded about your training, and for how long:
- Views, answers, active time, attempts, acknowledgments and attestations, with the time, your IP address and your browser's user agent. Your organization keeps them for its retention period: 7 years by default, never less than 3, and longer for anything it places on legal hold.
- Your acceptance of each agreement: which version, when, your IP address and user agent.
- Email we send you: the address, subject and whether it was delivered. The message itself is deleted once delivered, and within 24 hours at most.
- Identity checks, where a program needs one: the result and a reference. Images of your ID or your face are never stored by QubicAcademy.
The full detail, including who else handles your data, is in the Privacy Policy and the Subprocessors list.
Role-based access
| Who | Sees |
|---|---|
| You | Your own training, your email settings |
| Your organization's staff | Your training records, within what their roles allow |
| QubicAcademy | Only what it needs to run and support the service |
How it connects
Change which optional emails you get in Email settings. Required ones (password codes, sign-in alerts, agreement changes) are always sent. Questions about your records go to your organization.
Tips
- Clearing your browser's site data signs you out and forgets your theme; nothing else changes.
- Signing out removes the session cookies straight away.
Troubleshooting
- You were signed out unexpectedly. Sessions end after a period of inactivity, after a fixed maximum, and when you sign out in another tab. Clearing cookies also signs you out.
- You want your records deleted. Ask your organization: it is the controller, and it may be required by law to keep compliance records for a time.