Cookie Policy

Last Updated: 30 April 2026

1. Introduction

This Cookie Policy explains how Regulus ("we", "our", or "us") uses cookies and similar technologies when you visit our website at regulus.ai (the "Website") and use our services.

This policy should be read together with our Privacy Policy and Terms of Use.

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. They are widely used to make websites work more efficiently and provide information to website owners.

Cookies can be "session" cookies (temporary, deleted when you close your browser) or "persistent" cookies (remain on your device for a set period or until you delete them).

3. Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of our Website and services. Without these cookies, the services you have requested cannot be provided.

Cookie Name Purpose Duration
XSRF-TOKEN Security - protects against Cross-Site Request Forgery attacks 2 hours
regulus_session Maintains your logged-in session 2 hours
remember_web_* "Remember me" functionality when you choose to stay logged in 5 years
regulus_aff_ref Records which affiliate link you arrived from so we can attribute any subsequent subscription to the referring affiliate. Set only on first visit via an affiliate link; not overwritten on return visits (first-touch attribution). The IP address used to set this cookie is stored only as a one-way SHA-256 hash and cannot be reversed to identify you. 30 days

Legal Basis: These cookies are necessary for the performance of our contract with you (Article 6(1)(b) UK GDPR).

3.2 Browser Storage (Not Cookies)

In addition to cookies, we use browser local storage for certain preferences:

Storage Item Purpose Type
theme_preference Remembers your dark/light mode preference LocalStorage

Note: LocalStorage is not a cookie and remains on your device until you clear your browser data. Legal Basis: Legitimate interests (Article 6(1)(f) UK GDPR) - improving user experience.

3.3 Third-Party Cookies

We use limited third-party services that may set cookies on our behalf:

Service Purpose Privacy Policy
Stripe Payment processing and fraud prevention View Policy

Legal Basis: Contract performance for payment processing (Article 6(1)(b) UK GDPR).

4. Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (GA4), provided by Google Ireland Limited ("Google"), to help us understand how visitors use the Website. GA4 collects the following data under our configuration:

  • Anonymised IP address (the last octet is masked before storage)
  • Page URL and referrer URL
  • Device type, browser, and operating system (aggregated)
  • Engagement events including page views and custom events (e.g. when a subscription purchase completes — no payment card data is transmitted)

Legal Basis: Your consent (Article 6(1)(a) UK GDPR). GA4 is only activated after you click "Accept analytics" in the banner. If you click "Reject analytics", no GA4 cookies or tracking takes place and the analytics_storage consent flag remains set to denied.

Cookie Name Purpose Duration
_ga Distinguishes unique visitors (random ID — no personal data) 2 years
_ga_XXXXXXXX Maintains session state for the GA4 property 2 years
cookie_consent_v1 Stores your accept/reject choice so the banner is not shown again 1 year

Google's privacy notice: https://policies.google.com/privacy. You can also opt out globally using Google Analytics Opt-out Browser Add-on.

How to withdraw consent: Click the link in the footer at any time. Choosing "Reject analytics" will prevent any new GA4 data collection. Existing data in Google Analytics will be retained for the standard 26-month retention period; to request deletion of historical data, email privacy@askregulus.co.uk.

5. Cookieless Analytics (Ahrefs Web Analytics)

On our public marketing pages we load Ahrefs Web Analytics, a cookieless analytics service provided by Ahrefs Pte. Ltd. Ahrefs Web Analytics does not set cookies on your device, does not use browser fingerprinting, and does not collect personally identifiable information. It records aggregated information about page URL, referring page, country, and device type so we can understand how visitors find and use the Website.

Legal Basis: Legitimate interests (Article 6(1)(f) UK GDPR) - measuring and improving the Website. Because the service does not store or read information on your device, the consent requirement under regulation 6 of the Privacy and Electronic Communications Regulations (PECR) does not apply.

How to object: You can object to processing under legitimate interests at any time by emailing us (see section 9). You can also block the script using browser content-blocking extensions, or by enabling your browser's "Do Not Track" or "Global Privacy Control" signal. Ahrefs' privacy notice is available at https://ahrefs.com/privacy.

Things we do not use

Regulus does NOT use:

  • Advertising or marketing cookies
  • Social media tracking cookies (Facebook Pixel, etc.)
  • Cross-site tracking cookies
  • Behavioural profiling cookies

6. How to Manage Cookies

6.1 Browser Settings

Most web browsers allow you to control cookies through their settings. You can:

  • Delete all cookies from your browser
  • Block all cookies from being set
  • Allow only first-party cookies (blocking third-party cookies)
  • Clear cookies when you close your browser

Browser-Specific Instructions:

  • Chrome: Settings → Privacy and Security → Cookies
  • Firefox: Options → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Cookies and website data
  • Edge: Settings → Cookies and site permissions → Cookies

6.2 Impact of Blocking Cookies

⚠️ Important: If you block or delete our strictly necessary cookies, you will not be able to:

  • Log in to your account
  • Access your conversation history
  • Use our AI assistant service
  • Manage your subscription

7. Cookie Duration

Session Cookies

Deleted automatically when you close your browser. Used for essential functionality like maintaining your login session.

Persistent Cookies

Remain on your device for a set period. Used for "remember me" functionality and preferences. Maximum duration: 5 years (for "remember me" feature).

8. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our practices. We will notify you of significant changes by:

  • Updating the "Last Updated" date at the top of this page
  • Displaying a notice on our Website
  • Sending an email to registered users (for material changes)

9. More Information

About Cookies

For more information about cookies, visit:

Related Policies

10. Contact Us

If you have questions about our use of cookies, please contact:

Ask Regulus Ltd (trading as Regulus)
Registered Address: County House, St. Marys Street, Worcester, WR1 1HB
Company Registration: 16676659
VAT Registration: 500162456
Email: privacy@askregulus.co.uk

The strictly necessary cookies described in section 3.1 (CSRF protection and session management) do not require your consent under PECR, as they are essential for services you have actively requested. Google Analytics 4 cookies (section 4) require and only activate upon your explicit consent.