Cookies and storage
Bullish Bear uses device storage for requested learning, security, identity, checkout and an anonymous usage-measurement objection—not for advertising or cross-site profiling.
Effective 30 August 2026 · Version 2026-08-30 · XXVIII Ltd, company no. 08184502Anonymous usage measurement
The first-party, self-hosted analytics service uses no analytics cookie, advertising identifier, account identity, session replay or heatmap. It measures aggregate page and feature use, active minutes and coarse device context. A salted anonymous session identifier rotates every day, and raw measurements are deleted after 90 days. Browser Do Not Track is honoured. Use “Usage analytics” in any site footer to allow or refuse measurement at any time.
Auth0 identity and security
Auth0 uses strictly necessary session and security cookies when you choose to sign in with email/password or Google. They keep the authentication transaction secure, recognise the signed-in session and support sign-out. Their exact lifetime is controlled by the configured Auth0 session and security policy.
Legacy guest Research continuity
Interactive Research now requires a free account. A first-party bullish_bear_research_guest_v1 cookie may remain on a device that used Research before this change so its earlier guest evidence can be offered for explicit attachment after sign-in. It contains a random token, not an email address or readable profile; the server stores only its cryptographic hash. It is HTTP-only, SameSite=Lax, Secure on HTTPS and expires after one year unless renewed or removed.
Local storage
First-party local storage preserves requested course progress, chart preferences, practice and Quickfire summaries, Research continuity, free-sample state, sound choices and account-sync/conflict recovery. The umami.disabled value records only that this device has refused anonymous usage measurement. Local storage remains on the device until Bullish Bear clears it through applicable sign-out or deletion behaviour, you clear site data, or a feature replaces it. Signed-in progress selected for synchronisation is also stored in the protected account database as explained in the Privacy notice.
Session storage
Session storage remembers short-lived interface state such as whether the brand introduction has been seen during the session, the narration mute choice and protection against counting the same sample twice in one session. The browser normally removes it when the tab or browsing session ends.
Paddle checkout
The Paddle checkout script is loaded only when a signed-in user requests an enabled checkout or subscription-management journey. Paddle may then use storage required for checkout security, fraud prevention, transaction continuity and buyer-portal operation under its own notices. The free 21-day access period does not require payment details or load Paddle. Paid membership starts only when you choose a subscription and complete checkout.
Your controls
Use “Usage analytics” in the footer for the direct analytics objection control. You can also clear Bullish Bear site data through browser settings, although doing so may remove local preferences and any legacy guest Research continuity from that device. Signed-in users can download or delete the application-held learner record from Your Account; an active subscription must first be cancelled through the Paddle portal.