Cookie & Local Storage Notice
Shambits LTD · 86-90 Paul Street, London, England, EC2A 4NE, United Kingdom · hello@mubeenly.com
Version 3.1 · Effective 19 October 2026
Legal Centre
The short version
We offer one optional analytics cookie. It is off unless you turn it on. Nothing from Google is loaded and nothing is sent to Google until you choose "Accept", and choosing "Reject" leaves everything working exactly as it does now. You can change your mind at any time using the "Cookie settings" link in the footer of any page, on either site.
If you accept, it covers two things: this marketing website, and the steps of setting up an account at academy.mubeenly.com — registering, confirming your email address, creating a student profile, and choosing a subscription.
It covers nothing else. We do not measure lessons, lesson recordings, chat, homework, progress, reports, or anything a student does inside their account, and our teacher and admin applications have no analytics at all. Those parts of the service contain no analytics code whatsoever — not disabled code, none.
Separately, this marketing website uses a basic visit counter that sets no cookies and stores nothing on your device, so it runs whether or not you accept analytics. It only tells us roughly how many people visit each day and which countries they come from. See "Basic visit counting (no cookies)" below.
We do not use advertising cookies or tracking pixels, we do not sell or share your information with advertisers, and we do not track you across other websites.
What we do store in your browser (Web Storage, not cookies)
Our student, teacher, and admin applications use your browser's built-in storage (technically called `localStorage` and `sessionStorage`, not cookies) to keep the application working smoothly. Specifically:
| What's stored | Purpose | How long it stays |
|---|---|---|
| Access token | Keeps you signed in between page loads | Until you log out, or it expires |
| Refresh token | Lets you stay signed in without re-entering your password constantly | Until you log out, or it expires |
| Your basic account details (name, email, phone, role) | Lets the app show your account information without asking the server every time | Until you log out |
| Language preference | Remembers whether you've chosen English or Arabic | Persists across visits |
| Time zone display preference | Remembers a per-session choice about which time zone to show schedules in | Cleared when you log out |
None of this is used for advertising, tracking you across other websites, or building a profile of your browsing behaviour — it exists solely to make your own account work properly.
Optional analytics: this website, and setting up an account
We offer optional analytics using Google Analytics 4, to understand how visitors find us, which pages help them decide, and how far people get when setting up an account. We use it to count visits and completed steps — not to identify you.
Where it applies, if you accept:
| Where | Measured? | What |
|---|---|---|
| This marketing website | Yes | Pages viewed, and clicks through to register |
| Setting up an account at academy.mubeenly.com — registering, confirming your email, creating a student profile, choosing a subscription | Yes | Which of those steps were reached and completed |
| Everything else in your account — lessons, lesson rooms, recordings, chat, homework, progress, reports, billing, support | No | Nothing. No analytics code runs on those pages at all |
| Our teacher and admin applications | No | Nothing. They contain no analytics code |
A student's own learning activity is never measured. If your child uses Mubeenly, nothing they do in a lesson, in chat, in homework, or in their dashboard is sent anywhere.
The account pages that are measured record only that a step completed. The web addresses of those pages contain things like a confirmation link's security token, a payment reference, and an identifier for the student profile — none of which is ever sent. The address is rewritten to remove them before anything is recorded.
Nothing runs until you accept. Until you choose, no Google Analytics code is loaded on either site and no request is made to Google at all — not even an anonymous one. If you choose "Reject", the same remains true, and every part of this website and of the academy continues to work. If you never answer, nothing runs: there is no point at which silence is taken as agreement.
If you accept, the following are set:
| Cookie | Set by | Purpose | How long it stays |
|---|---|---|---|
_ga | Google Analytics | Distinguishes one browser from another so repeat visits are not counted as new people | Up to 2 years (Google's default) |
_ga_6D1N5Q2L26 | Google Analytics | Keeps track of a single visit (a "session") on this site | Up to 2 years (Google's default) |
mb_analytics_consent | Mubeenly | Remembers whether you accepted or rejected, so you are not asked again on every page | 6 months |
The mb_analytics_consent cookie stores only the word "granted" or "denied". It contains no identifier and is set whichever way you choose — including when you reject — because remembering your refusal is the only way to avoid asking you again.
What Google receives, if you accept: the pages you view on this site, the approximate region your visit comes from, and general details such as browser and device type. We have configured our Google Analytics account so that Google Signals, advertising features, advertising personalisation, and the "User-ID" feature are all switched off, and we have turned off Google's automatic measurement of form interactions and site-search terms. We have also instructed Google to redact email addresses and specific URL parameters before the data is stored.
We never send your name, email address, phone number, date of birth, any student's details, anything you type into a form, or the contents of anything in your account. On the account pages listed above we record only that a step was reached or completed. Nothing from a lesson, a lesson room, a lesson recording, chat, homework, progress, a report, or a student's dashboard is ever included, because no analytics code runs on any of those pages.
We have set Google to delete the visit-level analytics data it holds for us after 14 months. Aggregated totals — such as how many people visited a page in a given month — are kept beyond that, but they are counts, not records about an individual visit.
Google Analytics is provided by Google and information is processed on Google's infrastructure, which may involve transfers outside the United Kingdom. Where that happens, those transfers rely on the safeguards described in our Privacy Notice.
Our lawful basis for these cookies and this analytics processing is your consent. You can withdraw it at any time through the "Cookie settings" link in the footer of any page: withdrawing stops any further analytics and deletes the Google Analytics cookies from your browser. Withdrawing does not affect anything you have already done on the site, and does not limit your use of it.
Basic visit counting (no cookies)
On this marketing website only, we use Cloudflare Web Analytics to count visits. It runs for every visitor, including those who reject analytics above, because it uses no cookies, does not store anything on your device, and does not track you across other websites. Cloudflare does not use it to build a profile of you or for advertising.
What it tells us: the number of visitors and page views each day, which pages were viewed, which website referred the visit, the country the visit came from, and general browser and device type. Your IP address is used only to work out the country and is not stored in what we can see.
It is not used in our student, teacher or admin applications, or on the account-setup pages. Because it sets no cookie and reads nothing from your device, there is nothing for it to store or for you to clear. Cloudflare provides this service and acts on our behalf; information may be processed on Cloudflare's infrastructure outside the United Kingdom, on the safeguards described in our Privacy Notice. Our lawful basis is our legitimate interest in understanding, in aggregate, how many people visit our website. If you would rather not be counted, you can block static.cloudflareinsights.com in your browser or with a content blocker, and the website will work exactly the same.
Fonts
Our web pages use fonts that are hosted directly on our own servers, rather than requested from a third-party font provider at the time you visit the page.
Changes to this notice
Version 1.0 said we used no cookies and no analytics anywhere. Version 2.0 introduced optional, consent-first analytics on this marketing website, and said our applications ran none.
Version 3.0 extends that to one specific part of the academy: the steps of setting up an account. Because this is a wider scope than the one people were told about when they answered before, we are asking again rather than carrying an earlier answer forward. If you accepted or rejected under version 2.0, you will be asked once more, and nothing is measured on the academy until you answer.
Version 3.1 adds a cookie-free visit counter (Cloudflare Web Analytics) on this marketing website. It stores nothing on your device, so it does not change the scope of the Google Analytics choice you made, and we are not asking you again.
If this changes again — for example, if we ever introduce analytics inside the applications, or advertising anywhere — we will update this notice, and where legally required, ask for your consent before doing so.
Questions
If you have any questions about this notice, contact us at hello@mubeenly.com.