Legal

Cookie policy

Effective date: 16 August 2026

Cookie Policy

Draft date: 16 August 2026
Effective date: 16 August 2026

This Cookie Policy explains how Foregate Technologies Limited (Foregate, we, us) uses cookies and similar technologies on the MySchoolPilot marketing website. It should be read with the Privacy Policy.

1. What these technologies are

Cookies are small files stored on a browser or device. Similar technologies include local storage, pixels, tags and scripts that store or access information on a device. They may keep a session secure, remember choices, measure use or support integrations.

2. Who controls cookies

Foregate controls cookies on the MySchoolPilot marketing website. A school operating a self-hosted or institution-configured MySchoolPilot deployment is normally responsible for the cookies and integrations it enables there. Third-party providers may independently control data collected through their technologies.

3. Categories

Strictly necessary

These are required to provide a requested service or protect it, such as login or form sessions, CSRF protection, security and remembering a privacy choice. Where the law permits, they operate without consent and cannot be disabled through our banner. Blocking them in the browser may prevent forms or other core functions from working.

Functional

These remember optional settings such as your preferred display currency. They help the site show pricing and related information in the currency you selected.

Analytics

These help understand how visitors use the website. On the marketing site, Google Tag Manager loads only after you choose Accept on the cookie banner. Analytics technologies stay off if you choose Essential only.

Advertising or targeting

We do not currently use advertising or targeting cookies on the MySchoolPilot marketing website.

4. Verified cookie inventory

The following inventory reflects technologies currently deployed by the MySchoolPilot marketing website code. First-party cookies use the MySchoolPilot site domain that serves the page.

myschoolpilot_session

  • Type: HTTP cookie
  • Provider: Foregate/MySchoolPilot
  • Domain: first-party MySchoolPilot site domain
  • Purpose: Laravel session used for form submissions and flash messages
  • Category: strictly necessary
  • Duration: 120 minutes of inactivity (or until the browser session ends if session expiry-on-close is enabled)
  • Data sent to: Foregate/MySchoolPilot servers
  • Activated before consent? yes

XSRF-TOKEN

  • Type: HTTP cookie
  • Provider: Foregate/MySchoolPilot
  • Domain: first-party MySchoolPilot site domain
  • Purpose: CSRF protection for forms such as contact, demo request, partner apply and currency selection
  • Category: strictly necessary
  • Duration: matches the active session
  • Data sent to: Foregate/MySchoolPilot servers
  • Activated before consent? yes

msp_cookie_consent

  • Type: local storage key
  • Provider: Foregate/MySchoolPilot
  • Domain: stored locally in your browser
  • Purpose: remembers whether you chose Accept or Essential only so the banner does not keep reappearing
  • Category: strictly necessary
  • Duration: until you clear site data or use Cookie settings to change your choice
  • Data sent to: local/first party only
  • Activated before consent? yes

msp_currency

  • Type: HTTP cookie and local storage key
  • Provider: Foregate/MySchoolPilot
  • Domain: first-party MySchoolPilot site domain (cookie) and local browser storage
  • Purpose: remembers the display currency used for pricing and partner earnings estimates
  • Category: functional
  • Duration: cookie up to 365 days; local storage until cleared
  • Data sent to: Foregate/MySchoolPilot servers (cookie only)
  • Activated before consent? yes (needed to show pricing in a currency)

msp_currency_source

  • Type: HTTP cookie
  • Provider: Foregate/MySchoolPilot
  • Domain: first-party MySchoolPilot site domain
  • Purpose: records whether the display currency was chosen manually or inferred so the site does not override a visitor's choice incorrectly
  • Category: functional
  • Duration: up to 365 days
  • Data sent to: Foregate/MySchoolPilot servers
  • Activated before consent? yes

msp_ref

  • Type: HTTP cookie
  • Provider: Foregate/MySchoolPilot
  • Domain: first-party MySchoolPilot site domain
  • Purpose: attributes a visit to an approved partner referral link or code
  • Category: functional
  • Duration: 90 days
  • Data sent to: Foregate/MySchoolPilot servers
  • Activated before consent? yes (only when you arrive via a partner referral link)

Google Tag Manager (GTM-T48DTQG5)

  • Type: third-party script and any cookies or storage set by tags configured in that container
  • Provider: Google Tag Manager
  • Domain: googletagmanager.com and domains used by tags inside the container
  • Purpose: loads approved analytics or measurement tags after consent
  • Category: analytics
  • Duration: depends on the tags configured in the GTM container
  • Data sent to: Google and any destinations configured in the GTM container
  • Activated before consent? no — loaded only after you choose Accept

5. Consent and changing choices

On first visit, users are offered equally clear choices to Accept non-essential technologies or keep Essential only. Non-essential tags are blocked before consent. Silence, inactivity, scrolling or pre-ticked boxes do not constitute consent.

You may change or withdraw consent at any time without detriment through the Cookie settings control in the site footer (available on every page) or the Cookie settings button on this page. Withdrawal does not affect earlier lawful processing, but it stops future loading of non-essential tags until you accept again. The consent record may be retained to demonstrate and respect the choice.

A user who rejects optional cookies can still access core website and form functions.

6. Browser and device controls

Browsers can block or delete cookies. Device or browser controls may not remove server-held information and may cause necessary features to fail. Clearing storage may also erase the saved consent choice, causing the banner to reappear.

7. Children

Because the MySchoolPilot platform may be used by children in school deployments, institutions must use high-privacy defaults and avoid non-essential tracking in student-facing areas unless it is necessary, proportionate, transparent and lawfully authorised. Advertising and behavioural profiling should not be enabled for student accounts.

8. Third-party services

The marketing site may load Google Tag Manager after consent. Other school-app integrations (for example payment or messaging providers) are controlled by the institution that enables them and are covered by that institution's notices and the MySchoolPilot Privacy Policy, not by this marketing-site inventory.

9. Changes and contact

We may update this Policy when technologies, vendors or law change. The effective date will be revised and additional notice provided where required.

Foregate Technologies Limited (RC 7941211)
1 Iludun Street, Osogbo, Osun State, Nigeria
Email: contactus@myschoolpilot.com
WhatsApp: +234 807 618 2936