Cookie Policy

1. Introduction

This Cookie Policy explains how EduPayOS ("we", "our", "us", or "the Company") uses cookies and similar tracking technologies when you visit and use our payment orchestration and commission management platform (collectively, "the Platform" or "Services") available at edupayos.com and through our software applications.

This policy should be read in conjunction with our Privacy Policy and Terms of Service, which provide additional information about how we collect, use, and protect your personal information.

We do not ask you to consent to cookies, because we do not set any that require consent. Every cookie described in this policy is strictly necessary to sign you in, keep your session secure, or complete something you have asked us to do. You can still block or delete them through your browser settings, though doing so will stop you signing in.

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, smartphone, or other internet-enabled device) when you visit a website. Cookies are widely used to make websites work more efficiently, provide information to website owners, and enhance user experience.

Cookies typically contain:

• The name of the website that set the cookie
• A unique identifier (usually a randomly generated string)
• An expiration date (some cookies expire when you close your browser, while others persist for a specified period)
• Data that the website needs to remember about your visit

Cookies are stored by your web browser and can be accessed by the website that set them (first-party cookies) or by other websites that have permission to access them (third-party cookies). Cookies cannot access other information on your device or transmit viruses or malware.

3. The Cookies We Set

Every cookie we set is strictly necessary: it exists to sign you in, to keep that sign-in secure, or to complete an action you started. We set no analytics cookies, no advertising or retargeting cookies, and no cross-site tracking cookies, and we do not build a profile of your browsing.

Important: because all of these are strictly necessary, blocking them will prevent you signing in, making a payment, or using the Platform at all.

3.1 Information Stored in Your Browser (not cookies)

We also keep a small number of preferences in your browser's local and session storage. Unlike cookies these are never sent to us with your requests — they stay on your device, and each one records a choice you made yourself:

• edupayos_cookie_notice — Remembers that you have seen the cookie notice, and which version of it.
• edupayos.payer.lang — The language you chose on the payment pages.
• sidebar-collapsed — Whether you collapsed the admin sidebar.
• saved-views:* — Table filters you saved yourself, one entry per screen.
• rememberMe — Whether you ticked “remember me” on the sign-in form.
• _auth_hash — Carries the page you were heading to across a sign-in; cleared on arrival (session storage).

You can remove all of them at any time with your browser's "clear site data" control, or clear the cookie-notice record using the Cookie settings link in our footer.

4. Cookie Duration

Cookies can be categorised by their duration:

4.1 Session Cookies

Session cookies are temporary cookies that are deleted when you close your web browser. These cookies are essential for maintaining your session and ensuring that you remain logged in while using the Platform. Session cookies typically store:

• Authentication tokens and session identifiers
• Temporary form data
• Security tokens for CSRF protection

4.2 Persistent Cookies

Persistent cookies remain on your device for a specified period (ranging from days to years) or until you manually delete them. These cookies are used to:

• Remember your preferences and settings
• Maintain your login state across browser sessions (where you choose "Remember Me")
• Remember that you have seen this cookie notice

The exact lifetime of each cookie is given in the table in section 3. The longest-lived is the sign-in refresh cookie, which lasts up to 30 days — or less, if your organisation has set a shorter idle timeout.

5. Third Parties That Can Set Cookies

We do not embed analytics, advertising or social-media tags anywhere on this Platform. There is exactly one place where another company's code runs in your browser through us:

5.1 The Payment Checkout

When you pay tuition through our payment pages, the checkout itself is provided by EasyTransfer, the licensed remittance provider that executes the transfer, and is displayed inside our page in a frame. Airwallex supplies the card and wallet payment widget nested inside that checkout. Both may set their own cookies and read device information — including motion-sensor readings that we deliberately allow the frame to access — for fraud prevention and to complete the payment you have asked for.

We do not receive those cookies and cannot read them. Their use of your information is governed by their own privacy and cookie notices.

5.2 Our Infrastructure

The Platform is hosted on Cloudflare (Workers, D1 and R2). Cloudflare may set cookies for security and bot mitigation on traffic to our domains. See our Privacy Policy for the full list of the service providers that receive personal data, what each of them receives, and where they are located.

6. Other Technologies

6.1 Email Tracking

We do not place tracking pixels or web beacons in the emails we send. We send transactional messages only — payment confirmations, one-time codes, notifications and invitations — and we do not measure whether you opened them.

6.2 Local and Session Storage

We store the small set of preferences listed in section 3.1 in your browser. Unlike cookies, this data is not automatically sent to our servers with each request.

6.3 Device Fingerprinting

We do not use device fingerprinting. Our payment partners may perform device checks of their own inside their checkout for fraud prevention — see section 5.1.

7. Managing Your Cookie Preferences

You have several options for managing cookies and similar tracking technologies:

7.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically:

• View and delete cookies stored on your device
• Block all cookies or block cookies from specific websites
• Allow cookies only from websites you visit (block third-party cookies)
• Set your browser to notify you before cookies are set
• Delete cookies automatically when you close your browser

Instructions for managing cookies vary by browser:

• Google Chrome: Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Privacy, search, and services → Cookies and site permissions
• Apple Safari: Preferences → Privacy → Cookies and website data
• Opera: Settings → Privacy & security → Cookies

Important: Blocking or deleting essential cookies will prevent you from using our Platform. We recommend allowing essential cookies while managing your preferences for other cookie types.

7.2 Cookie Settings

On your first visit we show a short notice explaining what we store. Because every cookie we set is strictly necessary, there is nothing in it to accept or reject — the notice simply tells you what is there.

The Cookie settings link in the footer of our public and payment pages — and in the account menu inside the admin console — opens a panel listing each cookie and stored preference, and lets you clear the record of the notice so it is shown again. If we ever introduce a cookie that requires consent, that panel is where you will be asked, and where you will be able to withdraw.

8. Impact of Disabling Cookies

Disabling cookies may impact your ability to use our Platform:

8.1 Essential Cookies

If you disable essential cookies, you will not be able to:

• Log in to your account
• Access secure areas of the Platform
• Process payments or manage commissions
• Use core Platform features
• Maintain your session while navigating the Platform

8.2 Stored Preferences

Clearing the browser storage listed in section 3.1 costs you nothing but the preferences themselves: your language choice on the payment pages, your saved table filters and your sidebar state return to their defaults, and the cookie notice is shown again.

9. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make material changes to this Cookie Policy, we will:

• Update the "Last updated" date at the top of this Cookie Policy
• Notify you by email (if you have provided an email address) or through a prominent notice on our Platform
• Provide a summary of material changes, where appropriate
• Obtain your consent where required by applicable law for material changes

We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies and similar technologies. Your continued use of our Services after changes become effective constitutes your acceptance of the revised Cookie Policy, unless we are required by law to obtain your explicit consent.

10. Contact Us

If you have any questions, concerns, or requests regarding this Cookie Policy, our use of cookies, or your cookie preferences, please contact us using the following details:

When contacting us, please provide sufficient information to enable us to identify you and respond to your enquiry, including your name, email address, organisation (if applicable), and a description of your request or concern. We will respond to your enquiry as soon as reasonably practicable, typically within 5-10 business days.