Cookies & storage

EffectivePolicy date: 2026-11-07

Cookies are not the only way a website stores information on your device. This notice also covers local storage and similar technologies used by MockReps.

The public website

Choose “Analytics only” to allow Google Analytics for visits and signup/purchase measurement across the website and app. “Accept all” also allows TikTok Pixel on the public website for advertising measurement. “Reject all” keeps both off. Until you choose, neither provider sends measurement requests. Continuing to browse does not grant permission or affect access. Session replay is not enabled.

The notice appears on each page, including when you arrive directly on a practice guide, until you choose. It does not block the page. Use “Cookie settings” in the footer on any page to change your preferences later.

If you choose light or dark mode, mockreps-site-theme is stored locally in your browser to remember that choice. It contains the theme value, not your name or interview content, and remains until changed or cleared in your browser. The website defaults to light when there is no saved choice.

The application

The application uses authentication/session cookies so you can sign in securely. Sessions expire after 30 minutes of inactivity, with a two-minute warning and an option to continue. Active sessions have a maximum lifetime of seven days before you must sign in again. Logout or revocation can end access earlier. Authentication cookies are protected with HttpOnly, Secure in production and SameSite settings. Your browser may also store interface preferences.

The app also keeps temporary recovery copies of unfinished preparation text in this browser. They belong to the current login session and are available for recovery for 24 hours. Expired copies are removed when read; signing out clears the remaining copies. Saving to your account is separate. Recovery text is not sent to product analytics.

Security and checkout providers can use storage required for their features when you interact with them. Paddle's checkout has its own privacy information. These provider technologies are not installed by the static marketing page itself.

Website analytics and storage

With your analytics permission, Google Analytics measures page visits, referral sources, approximate location and device/browser information, scroll engagement and clicks to start practising. We remove URL query strings and fragments from reported page addresses and send only the referring site's origin. Campaign source, medium, name, ID, creative and keyword labels are measured separately after acceptance. Campaign labels, the original public landing route and the referring site origin can stay in internal links while you browse before choosing; this does not store a visitor identifier or send measurement requests. Other query values and advertising click identifiers are not sent. We do not enable automatic form, search or outbound-link collection, Google Signals, advertising personalisation, or User-ID tracking. Measurement includes verified signups, checkout starts and confirmed credit-pack purchases in the app. Purchase events include currency, pack value and a transaction reference for deduplication. Your account ID, name, email, CV, interview answers and audio are not sent.

The _ga and _ga_D8KPQRC1QT cookies distinguish browsers and maintain session information. They are configured for a maximum of 180 days without renewal on visits. Your versioned accept/reject choice is stored in the mockreps_ga4 cookie for 180 days, shared across mockreps.com and app.mockreps.com. The website also keeps a local mockreps-site-analytics-consent preference. A separate mockreps_ad_measurement cookie remembers your advertising choice for 180 days. An older mockreps_measurement preference can be read for Google Analytics only; it does not enable TikTok. Consented campaign context is kept in session storage for up to 30 minutes. A pending signup marker expires after seven days and is removed when next checked to confirm the new account after verification; it is not sent to Google. Event and user data retention is set to 14 months in Analytics; aggregated reports may remain longer. Google receives connection information when analytics is enabled. See how Google uses information from sites that use its services.

Application product analytics through PostHog are separate and off for your account until you explicitly opt in. Deployment availability does not grant consent. You can choose during signed-in onboarding or in account settings, and withdraw through the app’s Privacy choices. Selected events use an internal account ID; names, email addresses and interview content are excluded. Session replay and automatic capture are off.

Optional advertising measurement

With separate advertising permission, TikTok Pixel records public-site page visits and technical connection information to measure our campaigns. It may use cookies such as _ttp, page/referrer URLs and advertising click identifiers. The Google Analytics URL filtering described above does not apply to TikTok's SDK. We do not send app signups, purchases, interview content, names or email addresses to this pixel or enable automatic advanced matching. See TikTok's privacy information.

Your controls

Choose “Cookie settings” in the website footer or “Privacy choices” in the app to accept or reject Google Analytics. Advertising choices are controlled separately in the website footer; accepting Google Analytics in the app does not enable TikTok. The separate PostHog product-analytics choice is available during signed-in onboarding, in account settings and through Privacy choices. Withdrawing a category clears its known first-party measurement cookies and reloads the page to stop measurement. It does not delete information already collected. You can change the website's theme using its appearance button or clear site storage through your browser. Clearing application authentication cookies signs you out. Blocking necessary storage can prevent login or checkout from working. Any optional consent choice must remain separate from accepting product terms and must be as easy to change as to make.