Cookie Policy

Cookie Policy

Last reviewed 30 October 2026

CimotaTech Ltd / Handwriting Horizons

This Cookie Policy explains how CimotaTech Ltd uses cookies and similar localized storage technologies on the Handwriting Horizons platform and corporate website. As an educational infrastructure provider bound by the UK General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications Regulations (PECR), and the ICO’s Age Appropriate Design Code (Children's Code), we maintain a strict, privacy-first approach to digital storage.

1. Our "Zero Tracking" Philosophy

Unlike consumer websites, the Handwriting Horizons platform is a closed educational ecosystem. We do not use tracking cookies, advertising pixels, or behavioral analytics cookies.

No data concerning pupils, teachers, or IT administrators is ever shared with, sold to, or processed by third-party advertisers or data brokers.

2. Types of Cookies We Use

Under UK law, cookies are categorized by their purpose. CimotaTech Ltd relies exclusively on Strictly Necessary (Essential) Cookies. These are cookies that are required for the technical operation and security of the platform. Without them, the software cannot function.

We use Strictly Necessary cookies for the following purposes:

  • Authentication & Single Sign-On (SSO): To verify your identity when routing your login through your school’s designated Identity Provider (Wonde, Google Workspace, Microsoft Entra ID, or Hwb Cymru) via our Zitadel infrastructure.
  • Session Management: To keep authenticated users securely logged in as they navigate between different dashboards and modules within the platform.
  • Security: To detect and prevent fraudulent activity, mitigate cross-site request forgery (CSRF) attacks, and protect encrypted Wonde API data streams.
  • User Interface Customization: To remember temporary, non-identifiable user preferences, such as retaining your selection on the English / Cymraeg (Welsh) language toggle.

3. Cookie Consent Exemption

Because Handwriting Horizons only utilizes Strictly Necessary cookies for security and core functionality, we are exempt from the requirement to display disruptive cookie consent banners under UK PECR regulations.

By logging into the platform via your school's SSO, you are actively requesting a secure service, and these essential technical cookies are deployed automatically to fulfill that request safely. We do not require, nor do we ask for, consent to deploy non-essential tracking cookies because we simply do not use them.

4. Managing Local Storage

While our cookies are strictly essential for platform access, users and school IT administrators retain full control over their browser environments. You can configure your browser to block or alert you about these cookies. However, please be aware that blocking these essential cookies will break the Single Sign-On (SSO) integration, and users will be unable to authenticate into the Handwriting Horizons platform.

To manage or clear cookies, please refer to the security settings within your specific enterprise browser environment (e.g., Google Chrome Enterprise, Microsoft Edge, or Apple Safari).

5. Third-Party Sub-processors

Authentication routing is facilitated by our secure identity partner, Zitadel, and hosted on Google Cloud infrastructure (UK regions). During the login handshake, these sub-processors may temporarily utilize strictly necessary session tokens to securely pass your encrypted credentials back to the Handwriting Horizons application. These tokens automatically expire when the session is terminated or the browser is closed.

6. Updates & Contact

We review our privacy and cookie architecture continuously to ensure ongoing compliance with the ICO Children's Code. If we ever update our technical infrastructure in a way that requires new essential cookies, this policy will be updated accordingly, and your Data Protection Officer (DPO) will be notified.

If you are a school DPO or IT Director and require further technical clarification regarding our session management architecture, please contact our compliance team directly at compliance@cimotatech.com