Cookie Policy

Last updated: 16 May 2026

This Cookie Policy explains what cookies and similar technologies Surgical Steps uses on surgicalsteps.co.uk, why we use them, and how you can control them. It should be read alongside our Privacy Policy.

1. What are cookies?

Cookies are small text files placed on your device when you visit a website. They let the site remember your actions and preferences (such as being logged in) over a period of time, so you don't have to keep re-entering them every time you come back. We also use similar technologies such as the browser's local storage and session storage for the same purposes.

2. The categories we use

We group cookies into three categories:

• Strictly necessary — required to make the site work, including signing you in and remembering whether you are a paying subscriber. These cannot be switched off.
• Functional — remember small preferences such as which question filter you used last.
• Analytics — help us understand which pages are useful so we can improve the service. These are anonymous and aggregated.

We do not use advertising or cross-site tracking cookies.

3. Cookies we set

Name	Category	Purpose	Expiry
sb-access-token	Strictly necessary	Keeps you signed in (Supabase auth)	1 hour
sb-refresh-token	Strictly necessary	Renews your sign-in session	30 days
ss-consent	Strictly necessary	Records your cookie preferences	12 months
ss-last-filter	Functional	Remembers the question-bank filter you last used	12 months

4. Third-party services

We use the following third-party services, each of which may set its own cookies on your device when you interact with the relevant feature:

• Stripe — payment processing. Stripe uses cookies to protect against fraud and to remember your card if you choose to save it. See Stripe's cookie settings.
• Supabase — authentication and database. Only first-party authentication cookies are set.
• Vercel — site hosting. Sets a small number of anonymous cookies used for routing and basic anti-abuse.
• Google Fonts — font delivery. No cookies are set by Google Fonts itself, but your browser will connect to fonts.googleapis.com to download fonts.

We do not currently use Google Analytics, Facebook Pixel, or any other advertising-related third-party scripts.

5. How to control cookies

You can choose which non-essential cookies to accept the first time you visit the site, and you can change your mind at any time by clicking Cookie preferences.

You can also block or delete cookies through your browser settings, but parts of the site that need to remember you (such as the signed-in question bank) may stop working if you do.

6. Changes to this policy

We will update this policy if we add or remove cookies, or change how we use them. The "Last updated" date at the top of the page will always reflect the most recent change.

7. Contact

Questions about cookies? Email hello@surgicalsteps.co.uk.