Cookie policy
In force from 9 October 2026. Last updated: 17 October 2026.
What this covers
This page lists the cookies and similar browser storage used by TowerTalk (towertalk.co.uk and towertalks.com), what each is for, who sets it and how long it lasts. TowerTalk Ltd is responsible for them. How we use personal data more widely is in our privacy policy.
A cookie is a small file a website puts on your device. Browser storage (local storage and session storage) does the same job inside your browser, so we treat both together.
Your choice about analytics and advertising
Things that keep you signed in, protect the service and remember what you ask for do not need your consent. Analytics and advertising measurement do.
- UK and EEA: nothing for analytics or advertising runs until you press Accept on the banner. Staying silent counts as no.
- Elsewhere (including the United States): analytics is on, with a notice, unless you opt out on the banner. We decide which applies from the country of your connection, not from the website you typed.
The banner appears until you have made a choice, and that choice is remembered in this browser only. Use the buttons above to change it at any time; you will have to repeat it on each browser and device you use.
Cookies
| Name | What it is for | Set by | Type | How long it lasts |
|---|---|---|---|---|
| sb-<project>-auth-token (and .0, .1 if long) | Keeps you signed in. | TowerTalk, through our login provider Supabase | Essential | Up to 400 days, the default of the login library |
| tt_device | A random device ID the server uses to apply the fair-use limits on AI features to visitors who are not signed in. Not readable by page scripts. | TowerTalk (our server) | Essential | 400 days |
| tt_region | Records only “UK/EEA” or “elsewhere”, worked out from the country of your connection, so we show the cookie banner your local law expects. We do not keep the country. | TowerTalk (our server) | Essential | 30 days |
| tt_na | Set only when you are signed in. Records whether your visits should be left out of our usage counts and Google Analytics (our own staff and test accounts are), with your account number so it is only used for you. It never turns tracking on. | TowerTalk (our server) | Essential | 6 hours; removed when you sign out |
| tt_standard | Remembers whether you are practising to the UK (CAP 413) or US (FAA) standard. On towertalks.com it is set to US on arrival if you have not chosen. | TowerTalk (our server and your browser) | Preference | 1 year |
| tt_standard_chosen | Records that you picked your standard yourself (in Settings, or with Switch or Keep on the standard notice), so we stop asking. Holds only the value 1. | TowerTalk (your browser, when you choose) | Preference | 1 year |
| tt_workspace | Remembers which school workspace you last selected, if you belong to more than one. | TowerTalk (your browser, when you switch) | Preference | 1 year |
| tt_auth | A shared-password gate used only on private test copies of the site. It is not set when you sign in on the live site. | TowerTalk (our server) | Essential (test copies only) | 30 days |
| _ga and _ga_<container-id> | Google Analytics: tells visitors apart and keeps the state of a visit, so we can count visits and see which pages help. | Google, through the Google tag, only if analytics is allowed | Analytics (needs your choice) | 2 years (Google’s default) |
| _gcl_au, _gcl_aw and similar “_gcl” cookies | Google Ads tag: measures whether an advert led to a visit or sign-up. | Google, through the Google tag, only if advertising measurement is allowed | Advertising (needs your choice) | About 90 days (Google’s figure) |
Google sets the analytics and advertising cookies only if the Google tag is loaded and you have allowed it. Their names and lifetimes here are the ones Google publishes; Google may change them.
Browser storage
| Name | What it is for | Set by | Type | How long it lasts |
|---|---|---|---|---|
| towertalk:consent | Your cookie choice (granted or denied). | TowerTalk, in your browser | Essential | Until you clear it |
| towertalk:vid | A random visitor ID sent with our own usage counts so we can count devices rather than page views. Created only when analytics is allowed. | TowerTalk, in your browser | Analytics (needs your choice) | Until you clear it |
| tt:attribution:v2 and tt:attribution | Where you first came from (for example the campaign or website that sent you), kept so we can tell which channels help people learn. If you sign up it is stored against your account. Created only when analytics is allowed. | TowerTalk, in your browser | Analytics (needs your choice) | Until you clear it |
| tt:landed (session storage) | Stops us counting the same visit's landing twice. Created only when analytics is allowed. | TowerTalk, in your browser | Analytics (needs your choice) | Until you close the tab |
| tt:edition-stamped | Remembers that your edition (UK or US) has been recorded against your account, so it is not sent again. | TowerTalk, in your browser | Preference | Until you clear it |
| towertalk:arrival-standard (session storage) | Carries the standard you arrived with across one visit. | TowerTalk, in your browser | Preference | Until you close the tab |
| towertalk:theme | Your light, dark or system display choice. | TowerTalk, in your browser | Preference | Until you clear it |
| towertalk:settings:v1 | Your settings, such as callsign, home airfield and aircraft. When you are signed in they are also saved to your account. | TowerTalk, in your browser | Essential to the feature you use | Until you clear it |
| tt_chatter_v2, tt:radio-mode, towertalk:atc-voice, towertalk:dashboard-view:* | Your choices for background radio chatter, radio mode, spoken controller replies and dashboard layout. | TowerTalk, in your browser | Preference | Until you clear it |
| towertalk:progress:v1, towertalk:course-progress:v1, towertalk:course-progress-dirty:v1, towertalk:comms-progress:v1, tt_scenarios_done, towertalk:exam-history:v1, tt_assessment_v1, towertalk:taster:v1 | Your lesson, course, scenario, exam and assessment progress, and your free-allowance count, so they survive a reload and work when you are signed out. When you are signed in, progress is also saved to your account. | TowerTalk, in your browser | Essential to the feature you use | Until you clear it |
| towertalk:transcripts:v1, towertalk:kneeboard:*, towertalk:atis-pad:v1, towertalk:custom-aircraft:v1, towertalk:custom-airfields:v1, towertalk:audiobook:v1, towertalk:invoice:profile:v1 | Things you create on your own device: saved call transcripts, kneeboard notes, ATIS pad, custom aircraft and airfields, audiobook position and invoice-tool details. | TowerTalk, in your browser | Essential to the feature you use | Until you clear it |
| tt:dismissed-notifs, tt:launch:dismissed:v1, towertalk:aircraft-nudge-dismissed:v1, towertalk:pwa-prompt-dismissed, tt:offline:auto:v1 | Remembers which notices you closed and whether offline files have already been fetched. | TowerTalk, in your browser | Preference | Until you clear it |
| tt:voice-timing-log, tt:tts-cache-stats | Timing measurements of voice replies, kept in your browser for diagnosing delays. Not sent to us. | TowerTalk, in your browser | Essential (diagnostic) | Until you clear it |
| Offline cache (service worker) | In the installed app and supported browsers, saves pages and files so some practice works without a connection. | TowerTalk, in your browser | Essential to the feature you use | Until the cache is replaced or you clear site data |
You can see and delete all of this in your browser’s developer tools or by clearing site data. Clearing it signs you out and removes anything held only on your device, such as progress you have not saved to an account.
Other companies' tools on our pages
- Google Analytics and the Google Ads tag (Google): count visits and measure adverts. The Google tag loads when you first interact with a page (or after about ten seconds) and is told your choice before it does anything; if you have not allowed it in the UK or EEA, it stays switched off.
- Cloudflare Turnstile (Cloudflare): the check that you are a person, loaded on the sign-up form to stop automated sign-ups. It is part of the sign-up security, so it is not governed by the analytics choice above.
- Stripe: when you pay or manage a subscription we send you to Stripe’s own secure pages. Stripe sets its own cookies there, under its own policy.
- Daily: the video service used in live lesson rooms and voice rooms. Its code loads only when you open one of those rooms.
We do not control the cookies these companies set on their own pages, and we have not listed them here; their policies explain them. Sign in with Google, if you choose it, also takes you to Google’s own pages.
Our own usage counts
When analytics is allowed we also send simple events (for example that a page was viewed or a sign-up started) to our own database: the event name, the page path, whether you used the website or the app, the UK or US edition, your visitor ID and, if you are signed in, your account. This uses no third-party service.
Questions
Email info@towertalk.co.uk. For your wider data-protection rights, see the privacy policy.