NCLC Ready Cookie & Tracking Technologies Policy

Effective 2026-09-23 · Last updated: 2026-11-01

Summary in plain language

• The NCLC Ready apps use no cookies or tracking technologies for advertising, attribution, session recording or profiling. They use Google Analytics for Firebase and Firebase Crashlytics for usage statistics and crash reports, which you can turn off at any time in the app's Settings (Privacy Policy, section 9A).
• The website uses Google Analytics 4 only if you choose "OK" in the cookie banner, to count visits and see which pages help. Until you accept, and whenever you decline or your browser sends Global Privacy Control, no Google Analytics code, cookie or request exists.
• Google Analytics sets two first-party cookies, _ga and _ga_<ID>, which expire about 2 months after your last visit. Google signals and advertising features are off, and Google Analytics keeps the statistics for 2 months.
• The website also stores two strictly necessary records in your browser: your cookie-banner choice and, only if you change a setting in the accessibility tools, your display preferences.
• Google (Firebase Hosting) delivers the website. Like any web host, it processes your IP address to deliver pages and protect the service.
• You can change or withdraw your choice at any time with Cookie settings in the website footer. Withdrawing turns Google Analytics off and deletes the _ga cookies.

Introduction

This Cookie & Tracking Technologies Policy explains how the individual operator of NCLC Ready, operating under the Certloom Learning brand ("we," "us," "our," or the "Operator"), uses cookies and other tracking technologies when you visit or interact with the NCLC Ready website https://nclcready.com, our applications, and other online services that link to this Policy (collectively, the "Services").

Certloom Learning is a brand used by the Operator and is not represented as a corporation or separate legal entity.

This Policy should be read together with our Privacy Policy (https://nclcready.com/privacy), which provides additional information about how personal information is collected, used, disclosed, retained, and protected.

1. Cookies and Other Tracking Technologies We Use

"Cookies and other tracking technologies" include cookies, tracking or advertising pixels, web beacons, tags, scripts, software development kits (SDKs), local storage, session storage, device or advertising identifiers, fingerprinting, link-tracking, conversion tags, server-side tracking and similar technologies that store information on, access information from, or recognize a browser or device. For convenience, we refer to them collectively as "Cookies and Tracking Technologies."

We use the following technologies on the website (for the apps, see Apps below):

• Cookie banner: one first-party localStorage entry named nclc-ready:web-cookie-choice:v1 that remembers the choice you made in the cookie banner (see section 13).
• Accessibility tools: one first-party localStorage entry named nclc-ready:accessibility-settings:v1 that remembers the display preferences you set in the accessibility tools (text size, higher contrast, underlined links, a plainer font, stopped animations). It is written only after you change a setting, and it is removed when you reset the tools (see section 13).
• Google Analytics 4, only with your consent: after you choose "OK", the website loads Google's analytics script (gtag.js) from www.googletagmanager.com. It sets the first-party cookies _ga and _ga_<ID> and sends statistics about the pages you view to Google (see sections 2, 3 and 13).

Before you accept, the website loads nothing from Google Analytics and sets no cookie. We do not use pixels, beacons, other third-party scripts, third-party fonts, embedded third-party content, SDKs for advertising, advertising identifiers, fingerprinting or session replay, on the website or in the apps.

Apps: the NCLC Ready iOS and Android apps contain no advertising, attribution or tracking SDKs, and they do not access advertising identifiers. They include Google Analytics for Firebase and Firebase Crashlytics (from version 1.2.4), In versions of the app after 1.2.8, they are on by default once you accept the Terms of Use and Privacy Policy at first launch; in versions 1.2.8 and earlier, they stay off until you tap Allow in the app's usage-statistics notice. While they are on, they store a random app instance ID, a random Crashlytics installation ID and queued statistics or crash reports on your device and send them to Google (Privacy Policy, section 9A). You can turn them off at any time in Settings › Privacy (from version 1.2.4) or Settings › Privacy Center, which deletes that ID from your device. They store your practice data and settings locally on your device, as described in section 3 of our Privacy Policy. That local storage is needed to provide the features you use, and it is not used to track you.

2. Information Collected

The choice record contains only:

• a version identifier for the banner;
• your decision; and
• the date and time you made it.

It contains no identifier, is not sent to us or to anyone else, and stays in your browser until you change your choice or clear the site's data.

The accessibility record contains only the five settings listed in section 1 (a text-size level and four on/off values). It contains no identifier, is not sent to us or to anyone else, and stays in your browser until you reset the accessibility tools or clear the site's data.

Google Analytics, only after you accept. For each page you view, Google Analytics receives the page address and title, the page you came from, your browser and device type, screen size and language, an approximate location that Google derives from your IP address (country, region and city), and the random identifiers stored in the _ga cookies. Google states that Google Analytics 4 does not log or store IP addresses. We send no user ID, name or e-mail address, nothing you type or choose on the site (such as practice answers or converter scores), and no custom data about you. We collect page views only; Google signals, advertising features and ad personalisation are turned off.

When you load a page, your browser necessarily sends technical information, such as your IP address, browser type, requested page and time, to the host that delivers it (section 4). We do not receive this information from the host: we have not enabled Firebase Hosting's optional web request logs. The only script that collects information about your visit is Google Analytics, and only after you accept it.

3. Why We Use Cookies and Tracking Technologies

Strictly Necessary and Security

The choice record is strictly necessary to remember your cookie-banner choice, so that the banner does not reappear on every page. It serves no other purpose.

Preferences and Functionality

The accessibility record stores the display preferences you chose in the accessibility tools so that they apply on every page of the website. It exists only if you changed a setting, and resetting the tools removes it. The website stores no other preference. Your language is selected through the page address (for example the French pages), not through a stored setting.

Analytics and Performance

Only with your consent. If you choose "OK", Google Analytics 4 counts page views on the website so that we can see which pages and guides help people and improve the others. We look at aggregated reports, not at individual visitors. App usage statistics are separate, and you can turn them off at any time in the app (Privacy Policy, section 9A).

Advertising and Marketing

Not used. We do not deliver, select, personalize or measure advertising, and we do not run marketing campaigns that rely on tracking.

Personalization

Not used. We do not personalize content based on tracking.

Embedded Content and Third-Party Services

Not used. The website contains no embedded videos, maps, social buttons, chat widgets or other third-party content. Links to other websites (for example IRCC, the test administrators, Apple and Google) take you to those sites only when you click them. Those sites then apply their own cookie policies.

4. First-Party and Third-Party Technologies

The two localStorage records are first-party: the website itself stores them in your browser, and no third party can read them. The _ga cookies are first-party cookies (set for nclcready.com) written by Google's script; Google Analytics receives their values with each page view.

Google Analytics. Google Analytics is provided by Google LLC, which processes the statistics as our service provider (data processor) under the Google Ads Data Processing Terms that apply to Google Analytics (https://business.safety.google/adsprocessorterms/). How Google uses information from sites that use its services: https://policies.google.com/technologies/partner-sites.

Hosting. The website is served by Google's Firebase Hosting and its content-delivery network. Google states that "Hosting uses IP addresses of incoming requests to detect abuse and provide customers with detailed analysis of usage data" and that "Hosting retains IP data for a few months" (https://firebase.google.com/support/privacy). Google acts as our service provider (data processor) under the Firebase Data Processing and Security Terms (https://firebase.google.com/terms/data-processing-terms). Firebase Hosting's detailed web request logs, which include IP address and user agent, are available to site owners only if they link the project to Cloud Logging. We have not done so, and we keep that integration off. If we ever turned it on, we would update this Policy first.

5. Sharing Information Through Tracking Technologies

Google Analytics statistics reach Google only after you accept, only to produce reports for us, with Google signals and advertising features turned off. We do not use them for advertising, and we do not sell or share personal information for cross-context behavioural advertising. No other third party receives information about your browsing through the website.

Where applicable law provides a relevant statutory privacy right, that right remains available.

6. Your Cookie Choices

The cookie banner asks whether you allow Google Analytics on the website. No thanks keeps it off: nothing from Google Analytics is loaded. OK turns it on; your choice is remembered in your browser (section 13).

You can change or withdraw your choice at any time by selecting "Cookie settings" in the website footer. Withdrawing turns Google Analytics off, deletes the _ga and _ga_<ID> cookies, and nothing from Google Analytics loads again unless you accept again.

You can also delete everything by clearing the site's data in your browser (for example: Chrome › Settings › Privacy and security › Site settings › View permissions and data stored across sites; Safari › Settings › Privacy › Manage Website Data; Firefox › Settings › Privacy & Security › Cookies and Site Data › Manage Data). The banner will then appear again on your next visit, and the accessibility tools return to their defaults. You can also remove the accessibility record alone with Reset in the accessibility tools.

7. Consent

Strictly necessary technologies that are needed to provide a service you request may operate without prior consent where applicable law permits. Both records are such technologies: each exists only to do something you asked for (remember your banner choice, or apply the display settings you selected).

Google Analytics is not strictly necessary. It runs only with your prior, affirmative consent (choosing "OK"), and the website follows Google's consent mode in its basic form: until you accept, no Google tag is loaded, no cookie is set and no request is sent to Google. Declining, or sending Global Privacy Control, keeps it off. Your consent covers Google Analytics on this website only.

The app's own privacy choices, for AI feedback, voice practice, and usage statistics and crash reports, are separate from cookies and are described in our Privacy Policy.

8. Advertising and Targeted Advertising

We do not show advertising, use advertising networks, create advertising profiles, measure advertising campaigns or provide targeted advertising, on the website or in the apps.

9. Statutory Privacy Rights and Preference Signals

Privacy rights differ by jurisdiction. We honour Global Privacy Control (GPC) and similar legally recognized browser or device privacy preference signals. If your browser sends the GPC signal, the website treats it as declining optional cookies: the banner does not ask you, it records a refusal automatically, and Google Analytics is never loaded. We do not sell or share personal information.

This Policy does not represent that every browser signal has the same legal effect in every jurisdiction.

Privacy requests may be sent to certloomlearning@gmail.com.

10. Browser and Device Controls

Most browsers provide mechanisms to view, remove, restrict or block cookies and site data. The available controls differ between browsers and devices.

Clearing the cookies and site data for https://nclcready.com removes both records and the _ga cookies: the banner reappears and the accessibility tools return to their defaults. It does not affect how the rest of the website works. Google also offers a browser add-on that blocks Google Analytics on every site (https://tools.google.com/dlpage/gaoptout).

In the apps, you can delete all local data at any time in Settings › Privacy Center › Delete everything, or by uninstalling the app.

11. Do Not Track

Some browsers send a traditional "Do Not Track" (DNT) signal. There is no single universally applicable standard for responding to it. Google Analytics runs on the website only if you accept it, and a Global Privacy Control signal keeps it off (section 9).

12. Cookie Duration

The choice record is persistent local storage. It remains until you change your choice, clear the site's data or reset your browser. It contains no expiry date because it holds no identifier. When we materially change the banner, the version changes and you are asked again. The accessibility record is also persistent local storage: it exists only after you change a setting and is removed when you reset the tools, clear the site's data or reset your browser. The _ga and _ga_<ID> cookies expire about 2 months after your last visit (we set this limit), or as soon as you withdraw consent or clear them. Google Analytics keeps the statistics for 2 months, then deletes them. No other Cookies and Tracking Technologies exist.

13. Specific Cookies, Technologies, and Providers

The list below describes technologies that are actually present in the current production implementation. A vendor is never listed merely because it is commonly used by websites.

Current non-essential provider: Google Analytics 4 (Google LLC), only after you accept.

14. Third-Party Services

Apart from Google Analytics, which runs only with your consent (sections 3 to 7), the Services contain no third-party tracking technologies. If you follow a link to a third-party website, that website's own cookie and privacy policies apply.

15. International Processing

Both records stay in your browser and are not transmitted. If you accept Google Analytics, the statistics are processed by Google, including in the United States. Technical request data processed by our host (section 4) may be processed in Canada, the United States or other countries in which Google operates its network. Those jurisdictions may have privacy and data-protection laws that differ from those where you live. Where applicable law requires specific measures concerning an international transfer of personal information, we apply the required measure.

16. Children and Minors

The Services do not advertise to anyone. Google Analytics runs on the website only with consent, and we do not use it to identify or profile anyone, including children or minors. Nothing in this Policy authorizes tracking in circumstances prohibited by applicable law.

17. Changes to this Policy

We may update this Policy when technologies, providers, the Services or applicable legal requirements change. The "Last updated" date will be revised when the Policy changes. Before introducing any other non-essential technology, we would update this Policy and obtain any consent that applicable law requires.

18. Relationship to Privacy Policy

Information connected with Cookies and Tracking Technologies may be personal information under applicable law. For our processing purposes, recipients, retention, international processing, privacy rights, security and contact information, see our Privacy Policy. If this Policy and the Privacy Policy address the same activity, they should be read consistently, with this Policy giving more specific information about Cookies and Tracking Technologies.

19. Contact Us

Questions about this Policy, Cookies and Tracking Technologies or applicable privacy rights may be sent to:

NCLC Ready Operated under the Certloom Learning brand Email: certloomlearning@gmail.com