On this page
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make sites work, remember preferences, and gather anonymised analytics.
Cookies set by the website you're visiting are first-party cookies. Cookies set by other organisations are third-party cookies.
This policy covers cookies set on www.bespokelms.com and on BespokeLMS-hosted platform instances.
2. How we use cookies
- Essential operation — strictly necessary for login and secure navigation.
- Security — protect against CSRF attacks and detect unusual login activity.
- Analytics — privacy-first, anonymised page view data. No PII stored or shared.
We do not use cookies for advertising, remarketing, or cross-site behavioural tracking.
3. Types of cookies we use
Strictly necessary cookies
Essential for the site to function. Cannot be disabled without breaking core features such as login and form submission. No consent required under PECR.
Analytics cookies
Privacy-first analytics only — no IP addresses or user IDs stored. We do not use Google Analytics or any advertising-linked tool.
Functional cookies
Remember choices you make to improve your experience, such as language preferences or dismissed banners.
4. Full cookie list
| Cookie name | Type | Purpose | Duration |
|---|---|---|---|
_session | Necessary | Keeps you authenticated while logged in | Session / 30 days |
_csrf | Necessary | Prevents cross-site request forgery | Session |
_banner_dismissed | Functional | Remembers that you dismissed a notification banner | 30 days |
_analytics | Analytics | Anonymised page view tracking (no PII) | 12 months |
_locale | Functional | Stores your preferred language or regional setting | 12 months |
5. Third-party cookies
BespokeLMS does not embed third-party advertising, social media sharing buttons, or tracking pixels. Where customers embed third-party tools in their own LMS instance, those providers may set their own cookies — customers are responsible for disclosing and managing these.
6. Managing your cookies
All modern browsers let you view, delete, and block cookies:
We also respect the browser "Do Not Track" (DNT) signal — when enabled, optional analytics cookies are not loaded for that session.
7. Changes to this policy
We review this policy at least annually. If we add cookies requiring consent under PECR, we will update this policy and implement a consent mechanism before deploying them.
8. Contact us
Also see our Privacy Policy and Terms of Service.