Cookie Policy

Last updated 1 July 2026

This policy explains how Polymorphic Studios Ltd (trading as “Software for Schools”, “we”, “us”) uses cookies and similar technologies on our website and in our products. It should be read alongside our Privacy Policy, which explains how we handle personal data more generally.

Who we are

Software for Schools is a trading name of Polymorphic Studios Ltd, a company registered in England & Wales (company no. 09041072), registered office 237 Westcombe Hill, London, SE3 7DW. We are registered with the Information Commissioner's Office (ICO).

For any question about this policy, contact us at [email protected].

What cookies are

Cookies are small text files that a website stores on your device when you visit. They are widely used to make websites work, to keep them secure, and to remember your preferences. Similar technologies — such as your browser's local storage — can be used in the same way, and where we mention “cookies” in this policy we mean these technologies too.

Cookies can be “session” cookies, which are deleted when you close your browser, or “persistent” cookies, which stay on your device until they expire or you remove them. They can be set by the site you are visiting (“first-party”) or by another organisation (“third-party”).

Our approach

We keep our use of cookies to a minimum. We do not use advertising, marketing or tracking cookies, and we do not use third-party analytics on our website or in our products. We do not sell data collected through cookies, and we do not use cookies to build profiles of you across other websites.

The cookies we do use are either strictly necessary for our website and products to work securely, or functional cookies that simply remember a preference you have set. Because we do not set non-essential cookies, we do not need to show a cookie consent banner: strictly necessary cookies are exempt from consent requirements under the Privacy and Electronic Communications Regulations (PECR), and the functional cookies we use in our products are only ever set as a direct result of a choice you make.

Cookies on this website

Our marketing website (softwareforschools.uk) uses only strictly necessary cookies:

• Session cookie — keeps our website working correctly as you move between pages and protects submitted forms. Set by us (first-party). Expires at the end of your browsing session. Strictly necessary.
• XSRF-TOKEN — a security cookie that protects our forms against cross-site request forgery. Set by us (first-party). Expires at the end of your browsing session. Strictly necessary.
• Cloudflare security cookies (for example __cf_bm) — set by Cloudflare, which provides network security and content delivery for our website, to help distinguish genuine visitors from automated traffic. These are short-lived. Strictly necessary. See Cloudflare's cookie information for more detail.

We do not use any analytics, advertising or tracking cookies on this website.

Cookies in our products

When school staff sign in to and use our products, we set a small number of cookies. These are used to keep accounts secure and to remember display preferences — they are not used to track you and are not shared with any third party for advertising.

Strictly necessary cookies:

• Session cookie — maintains your signed-in session and keeps the application working correctly. Expires at the end of your session or after a period of inactivity. Strictly necessary.
• XSRF-TOKEN — protects the application against cross-site request forgery. Expires at the end of your session. Strictly necessary.
• “Remember me” cookie (for example remember_web_…) — set only if you choose the “remember me” option when signing in, so you do not have to sign in again on that device for a period of time. Strictly necessary for the feature you asked for.

Functional (preference) cookies:

• appearance — remembers whether you have chosen a light, dark or system colour theme. Set only when you change this setting. Lasts up to one year. Functional.
• sidebar_state — remembers whether you have collapsed or expanded the navigation sidebar. Set only when you change it. Functional.

Third-party and analytics cookies

We do not use Google Analytics or any equivalent third-party analytics service, and we do not use advertising or social-media tracking cookies. The only third-party cookies you may encounter are the Cloudflare security cookies described above, which exist to keep our website secure rather than to track you.

Our hosting providers may keep server logs containing limited technical information (such as IP addresses) for security and diagnostics, as described in our Privacy Policy. These logs do not rely on cookies.

Managing cookies

Most browsers let you view, manage, block and delete cookies through their settings. You can usually find these controls in your browser's privacy or security preferences, and you can set your browser to warn you before a cookie is stored.

Please note that our website and products rely on the strictly necessary cookies above to function and to stay secure. If you block or delete these cookies, parts of the site may not work correctly, and you may not be able to sign in to our products. Blocking the functional cookies will not stop our products working — you will simply need to set your preferences again each time.

For more general information about cookies and how to manage them, you may find ico.org.uk/for-the-public/online helpful.

Children

We do not use cookies to market to children, and children do not sign in to our products. The cookies described in the “Cookies in our products” section are set for school staff who use our products to support the children they teach.

Changes to this policy

We may update this policy from time to time — for example, if we introduce a new feature that uses cookies. The “last updated” date above shows when it was last revised. Material changes will be reflected here.

Contact

Polymorphic Studios Ltd [email protected]