1. Introduction
This Cookie Policy explains how HackXium uses cookies and similar technologies when you visit or use our platform at hackxium.com (the Service). It describes what these technologies are, which ones we set, why we set them, and the choices available to you. It applies to every visitor to the Service, whether or not you hold an account.
The Service is operated by Xium Labs Ltd, a company registered in England and Wales under company number 16702035 (we, us, our). We provide cohort-based executive training in AI and cybersecurity for senior professionals. Necessary cookies keep that service working securely and reliably; any analytics or marketing cookies run only if you choose to allow them.
This policy sits alongside our Privacy Policy, which explains more broadly how we collect and use personal data, and our Terms of Service, which govern your use of the Service. Where a cookie or similar technology involves the processing of personal data, the Privacy Policy applies to that processing. If anything in this policy is unclear, we encourage you to contact us using the details in section 10 before continuing to use the Service.
2. What cookies are
A cookie is a small text file that a website places on your device (computer, tablet or phone) when you visit it. The file is stored by your browser and sent back to the website on later visits or as you move between pages. Cookies allow a website to recognise your device, remember that you have signed in, and distinguish your session from everyone else’s. They are a standard, long-established part of how the web works.
Alongside cookies, websites can use similar technologies that serve comparable purposes. The most relevant for the Service is local storage, a feature of modern browsers that lets a website store small amounts of information on your device. Unlike cookies, information in local storage is not automatically sent to our servers with each request; it stays in your browser until it is cleared. Where this policy refers to cookies, it includes local storage and similar technologies unless we say otherwise.
Two distinctions are useful when reading the rest of this policy:
- First-party and third-party cookies. First-party cookies are set by the website you are visiting, in this case by us. Third-party cookies are set by a different organisation whose content or services appear on, or are linked from, the page you are viewing. As explained in section 6, third-party analytics or marketing cookies are set only where you have consented, and none are set by default.
- Session and persistent cookies. Session cookies last only as long as your browsing session and are deleted when you close your browser. Persistent cookies remain on your device for a fixed period, or until you delete them, so that the website can recognise you when you return.
3. How we use cookies
We group the cookies and similar technologies used by the Service into three categories: strictly necessary, analytics and marketing. Strictly necessary cookies are required for the Service to function and to keep it secure; analytics and marketing cookies are optional and are switched off unless you turn them on.
The strictly necessary cookies we set do three things:
- Authentication. When you sign in through our sign-in page or create an account via sign up, cookies keep you signed in as you move around the Service, so you do not have to re-enter your credentials on every page. Without them, enrolment, learning materials, deliverable submission and your certificates would be inaccessible.
- Security. Cookies help us protect sign-in and payment flows against common attacks, such as requests forged from other sites, and help us detect and limit abusive or automated activity. These protections operate in the background and exist to keep your account and our platform safe.
- Preferences. We remember a small number of choices you make, including your cookie choices themselves, so that the Service behaves consistently and we do not show you the same prompt repeatedly.
Analytics and marketing cookies are optional. They are off by default and are set only if you turn them on through the cookie banner or its preferences panel. Analytics cookies help us understand, in aggregate, how the Service is used so we can improve it. Marketing cookies, which may include a third-party pixel, let us measure the effectiveness of our campaigns and share more relevant information about our programmes. You can change or withdraw these choices at any time, as described in sections 5 and 7.
At the date at the top of this page, the Service sets only strictly necessary cookies, and no analytics or marketing cookies are active. We present the optional categories so your preference is recorded and honoured automatically if and when we enable a cookie in either category, and we will update the table in section 4 before any such cookie is deployed.
4. The cookies we set
The table below describes the cookies and local storage entries the Service sets, grouped by what they do. We have described them generically rather than by internal technical name, because technical names can change with routine engineering work while the purpose and duration remain stable. Every cookie in the table below is strictly necessary; optional analytics and marketing cookies are not listed because none are currently set, and we will add them here before any is deployed.
| Name | Category | Purpose | Duration |
|---|
| Authentication (session) | Strictly necessary | Identifies your signed-in session so you stay logged in as you navigate between pages, access learning materials and submit deliverables. | Session |
| Authentication (persistent sign-in) | Strictly necessary | Allows the Service to recognise your device and keep you signed in between visits, so you do not have to sign in again every time you return. | Up to 12 months |
| Security | Strictly necessary | Protects sign-in and payment flows against forged requests and other common attacks, and helps us detect and limit abusive or automated activity. | Session |
| Cookie choices | Strictly necessary | Stores your cookie consent choices so we apply them and do not ask again on every visit. | Up to 6 months |
| Preferences (local storage) | Strictly necessary | Remembers small interface choices on this device, such as whether you have seen our newsletter invitation. | Up to 12 months |
Exact lifetimes may be shorter than the maximum shown, and session entries are removed when you close your browser or sign out. If we add a cookie that does not fit within these categories, we will update this table before it is deployed.
5. Why consent works the way it does
In the United Kingdom, the use of cookies is governed by the Privacy and Electronic Communications Regulations (PECR), alongside UK data protection law. PECR requires consent before storing information on, or accessing information from, a user’s device, but it contains a specific exemption for cookies that are strictly necessary to provide a service the user has requested. Keeping you signed in, securing your session and enabling payment flows all fall squarely within that exemption, so we set our strictly necessary cookies without asking for consent.
Analytics and marketing cookies are not exempt, so for those categories we rely on your consent. We collect it through a cookie banner shown on your first visit, which lets you accept all optional cookies, reject all of them, or open a preferences panel and choose each category individually. Strictly necessary cookies are always on and cannot be switched off, because the Service cannot work without them; the optional categories are off until you turn them on.
Your choice is stored in a strictly necessary cookie on your device so that we apply it and do not ask again on every visit. You can change or withdraw it at any time by reopening the preferences from the banner, or by clearing the relevant cookie through your browser as described in section 7. Withdrawing consent is as easy as giving it, and refusing optional cookies never affects your access to the Service.
As noted in section 3, no analytics or marketing cookies are active at the date of this policy. Recording your preference in advance simply means it will be honoured automatically, without setting anything until then, if we enable a cookie in one of those categories in future.
6. Cookies set by others
By default, no third party sets analytics or marketing cookies through the Service. We do not embed advertising networks, social media pixels or third-party analytics tools in our pages unless you have consented to the relevant optional category described in section 3. If we introduce such a technology, for example a measurement pixel, it will load only after you have given that consent, and never by default.
There are two situations in which a third party may nonetheless set its own cookies in connection with your use of the Service:
- Payment pages.Payments for our programmes are handled by external accredited payment processors. When you proceed to payment, you may interact with pages or components operated by the payment processor, which may set its own cookies for fraud prevention, security and the operation of the payment itself. Those cookies are set by the processor, not by us, and are governed by the processor’s own privacy and cookie policies.
- Embedded or linked third-party content. If we embed content hosted by a third party, or link you to an external site (for example supplementary reading connected to a programme on our coursespages), that third party may set cookies when you interact with its content or visit its site. Again, those cookies are governed by the third party’s own policies, and we encourage you to review them.
We choose our service providers with care. Except within an optional category you have consented to, we do not permit any provider to use cookies set in connection with the Service for advertising or profiling purposes. Our Privacy Policy explains more about the categories of trusted service providers we work with and the safeguards that apply to them.
7. How to manage cookies
You are always in control of the cookies stored on your device. Every major browser lets you view the cookies a site has set, delete some or all of them, and block cookies from particular sites or from all sites. These controls are usually found in the browser’s settings under headings such as privacy, security, or site data, and each browser publisher provides current instructions in its help documentation. Because menu layouts change frequently, we recommend consulting your browser’s own help pages for up-to-date steps rather than relying on third-party guides.
In general, you can:
- delete cookies already stored on your device, individually or for all sites at once;
- block all cookies, or block only third-party cookies while allowing first-party cookies;
- configure your browser to clear cookies automatically each time you close it;
- use private or incognito browsing modes, in which cookies are discarded when the window is closed; and
- clear local storage for a specific site, usually through the same site data controls that manage cookies.
You should be aware of the consequences of blocking essential cookies for this Service. Because everything we set is strictly necessary, blocking cookies for hackxium.com will prevent you from signing in and staying signed in, will break enrolment and payment flows, and will make your learning materials, deliverable submissions and certificates inaccessible. Public pages, such as programme listings on our discover page and certificate verification pages, will generally remain viewable, but any feature that depends on knowing who you are will not work. If you delete cookies, you will be signed out and will need to sign in again.
8. Similar technologies
As noted in section 2, we use browser local storage alongside cookies. Our use of local storage is narrow: we store small preference values on your device, such as whether you have seen our newsletter invitation, and limited state that helps the interface behave consistently between visits on the same device.
Information held in local storage stays in your browser. It is not transmitted to our servers with each request in the way a cookie is, it is not shared with third parties, and it is not used to track your activity on other websites. It persists until you clear it through your browser’s site data controls or until we replace it as part of an update to the Service.
We do not use device fingerprinting or covert identification techniques anywhere on the Service. Any measurement pixel used for the optional marketing category described in section 3 would load only with your consent and is disclosed here rather than hidden. If our use of similar technologies ever expands beyond what is described here, we will update this policy before making the change.
9. Changes to this policy
We keep this policy under review and will update it when our use of cookies or similar technologies changes, when the law or regulatory guidance changes, or when we can make the policy clearer. The effective date at the top of this page tells you when the current version took effect.
For minor changes, such as clarifications of wording or updates to the table in section 4 that do not introduce a new category of cookie, the updated policy published on this page is the authoritative version. For material changes, in particular the introduction of any cookie that is not strictly necessary, we will take reasonable steps to bring the change to your attention before it takes effect, for example through a notice on the Service or an email to account holders, and where the law requires it we will obtain your consent first.
We recommend revisiting this page from time to time, particularly before enrolling in a new programme, so that you remain aware of how we use these technologies.