Legal

Cookie policy

How EU AI Fit uses cookies and similar technologies. Last updated 4 September 2026.

1. Scope and who we are

Cookies are small text files stored on a device. Similar technologies include local storage, pixels and other methods of storing or accessing information on a device. EU AI Fit is a trading name of The Driving Training Centre Ltd, company number 12361535, whose registered office is 9 Glissons, Ferndown, England, BH22 9DX. This policy explains the storage and access technologies used by the EU AI Fit website and application.

2. Our current position

EU AI Fit uses technologies that are necessary for authentication, security, controlled onboarding and the workspace service a user requests. These necessary technologies are not used for advertising, behavioural profiling or cross-site tracking. On public information pages, we offer optional Google Analytics. The Google tag is not requested or loaded unless the visitor accepts analytics. We send only the public route path without query parameters, a page title, page-speed and responsiveness measurements, and a small number of named journey events with broad categories. We do not send form content, email addresses, assessment answers, customer names, AI-system identifiers or authenticated-workspace activity. Advertising storage, advertising user data, personalised advertising and Google signals remain disabled. Google Analytics Enhanced Measurement is disabled, so Google does not automatically collect scroll, outbound-click, search, video, download or history-change events for EU AI Fit. Necessary technologies cannot be disabled through an EU AI Fit preference panel without preventing requested functionality. Optional analytics can be rejected or withdrawn at any time through Cookie settings in the site footer. Rejecting analytics does not affect the website or workspace service.

Strictly necessary cookie inventory

Secure production deployments may add the __Secure- or __Host- prefix to Auth.js cookie names. Cookies are set only when the relevant sign-in, onboarding or workspace feature is used.

CookieProviderPurposeDuration
__Secure-authjs.session-token (or authjs.session-token)EU AI Fit / Auth.jsKeeps an authenticated user signed in and links the browser session to the server-side account session.Up to 30 days, or until sign-out or session revocation
__Host-authjs.csrf-token (or authjs.csrf-token)EU AI Fit / Auth.jsProtects authentication requests against cross-site request forgery.Session or short-lived authentication flow
__Secure-authjs.callback-url (or authjs.callback-url)EU AI Fit / Auth.jsReturns the user to the intended EU AI Fit page after authentication.Authentication flow or session
__Secure-authjs.pkce.code_verifier, __Secure-authjs.state and __Secure-authjs.nonce (or local non-secure variants)EU AI Fit / Auth.jsProtects and correlates the temporary Google or Microsoft OAuth sign-in flow.Authentication flow; PKCE and state expire after 15 minutes
euaifit-email-loginEU AI FitTemporarily protects and carries the email-code sign-in request between the request and verification pages.10 minutes
euaifit-workspace-accessEU AI FitTemporarily records successful verification of an approved workspace access code during controlled onboarding.30 minutes
euaifit-active-workspaceEU AI FitRemembers which authorised customer workspace the signed-in user selected.90 days, or until replaced or cleared

Optional analytics inventory

The EU AI Fit consent record is stored after either choice so we can honour it. The Google technologies are available only after Analytics is accepted; rejecting optional analytics prevents the Google tag from loading.

TechnologyProviderPurposeDuration
euaifit-analytics-consent (local storage)EU AI FitRemembers whether optional public-site analytics were accepted or rejected, including the policy version and choice date.Up to 180 days, then a fresh choice is requested
_gaGoogle AnalyticsDistinguishes consenting public-site browsers so aggregate visits and journeys can be measured.Up to 180 days
_ga_46CW61E1G5Google AnalyticsMaintains the state of the consenting public-site Analytics session for the EU AI Fit measurement property.Up to 180 days

3. Analytics and performance

We use hosting logs and privacy-conscious performance information to identify faults, protect the Service and understand aggregate operational outcomes. Standard server logs are described in our privacy policy and are not browser cookies. If a visitor accepts, Google Analytics helps us understand visits to public content, page loading and responsiveness, and completion of the exposure check, contact form and pilot-update journey. Performance measurements include TTFB, FCP, LCP, INP and CLS, together with a random page-load measurement identifier; they do not include page content or workspace data. The EU AI Fit property is configured with two-month user and event data retention, with retention not reset by later activity. Browser identifiers expire after no more than 180 days under our tag configuration. Google uses the requesting IP address to derive coarse location and provide the service but states that GA4 does not log or store individual IP addresses. Our legal basis for storing or accessing optional Analytics identifiers, and for the associated processing, is consent. We do not use Analytics for advertising, behavioural profiling or decisions about individuals. Google may process information outside the UK or EEA using the transfer safeguards described in its data-processing terms.

4. Managing cookies

Most browsers allow you to see, delete or block cookies and to notify you before a cookie is stored. Blocking strictly necessary cookies may prevent sign-in, security checks, onboarding or workspace selection from functioning. Use Cookie settings in the site footer to accept, reject or withdraw optional analytics. Withdrawal updates Google Consent Mode to denied and removes the Analytics cookies accessible to EU AI Fit. Your choice is requested again after 180 days or when the consent policy version changes. Browser controls are also available in the privacy or site-data settings for Chrome, Safari, Firefox and Microsoft Edge.

5. Third-party services

If you choose Google or Microsoft single sign-on, that provider processes the authentication request on its own domain and may use its own necessary security and session technologies. Its privacy and cookie information applies while you use that provider. Our hosting and infrastructure providers process technical request information needed to deliver and protect the Service. Our email-delivery provider processes message and delivery data; email measurement settings are governed separately from browser cookies and are described in our privacy information where applicable. Google processes optional Analytics data only after the visitor's choice enables it. We do not currently use advertising networks, social-media tracking plugins, browser fingerprinting or behavioural profiling tools, and we do not sell cookie data or browsing history.

6. Changes and contact

We review this inventory when the Service or applicable rules change. A new non-essential technology will not be activated merely because an account or measurement property exists; the live website implementation, notices and controls must be approved first. Questions or objections can be sent to support@euaifit.com. This cookie policy was last updated on 4 September 2026.

For information about personal data, legal bases, retention, rights and complaints, read our privacy policy. You can also read Google's Analytics privacy and data safeguards information.