Cookie Policy
Controller: Quantum Light Management Ltd (company no. 13878761). Version 1.1 — 13 October 2026.
1. ABOUT THIS POLICY
This policy explains how Quantum Light Management Ltd ("Quantum Light", "we", "us") uses cookies and similar technologies on quantumlightcapital.com and in the QuantumLight Portal (the "Portal"), including the public playbook pages that you can read without signing in, and on docs.quantumlightcapital.com for as long as we continue to serve it, what each of them does, how long each of them lasts, and how you can control them.
It should be read together with our Website and QuantumLight Portal Privacy Policy (the "Privacy Policy") at https://quantumlightcapital.com/privacy-policy, which explains what we do with the personal data these technologies generate, and with our Website and QuantumLight Portal Terms of Service (the "Terms of Service") at https://quantumlightcapital.com/terms-of-service.
We are registered with the Information Commissioner's Office under registration reference ZB332737. If you have any questions about this policy, contact us at dpo@quantumlightcapital.com.
The version of this policy in force before 13 October 2026 is archived at https://quantumlightcapital.com/cookie-policy/2026-09-11.
2. WHAT COOKIES AND SIMILAR TECHNOLOGIES ARE
A cookie is a small text file that a website places on your device. Similar technologies — including local storage, session storage, pixels and software development kits — do the same job by different means.
The law that applies is not only data protection law. Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 governs the act of storing information on, or gaining access to information stored on, your device — whatever the technology, and whether or not the information is personal data. In the European Economic Area the equivalent rule is Article 5(3) of the ePrivacy Directive, as implemented in each country. This policy therefore covers everything we store on or read from your device, not only cookies.
3. YOUR CONSENT, AND HOW TO CHANGE IT
We do not need your consent for technologies that are strictly necessary for the website or the Portal to work, or for a service you have asked for — signing you in, keeping you signed in when you have asked us to, and protecting the site against automated abuse. We need your consent for everything else, including analytics and remembering on your device how you have asked the website to look.
When you first visit our website, you will be asked what you allow: you can accept all, reject everything that is not strictly necessary, or choose under Manage, where each category has a switch that stays off until you turn it on. Our website asks about analytics and interface preferences. The Portal asks nothing: it uses no analytics, and it keeps the interface choices you make with your account rather than on your device (paragraph 5). Nothing other than the strictly necessary technologies in the table in paragraph 4 is set until you say yes. If you say no, nothing is set beyond those strictly necessary technologies; we record only your answer. We will ask again after six months, and sooner if we change what we use these technologies for.
Every answer you give, including a withdrawal, is also recorded on our server, so that we can show what you chose: a randomly generated consent ID, the time, your answer for each category, the version of this policy, a fingerprint of the wording you were shown, and which button you used. We do not record your IP address or details of your browser, and we do not link the record to your QuantumLight Portal account.
You can change your mind at any time from the Cookie Settings link in the footer of our website. Withdrawing consent is as easy as giving it, and does not affect your access to anything on the site or in the Portal.
4. THE TECHNOLOGIES WE USE
The following table lists everything we store on or read from your device.
| Name | Set by | What it does | Type | Lasts | Category |
|---|---|---|---|---|---|
| _ga | Google (first-party) | Distinguishes one visitor from another by storing a randomly generated client identifier | Cookie | 2 years | Analytics — consent required |
| _ga_H0MWQX733J | Google (first-party) | Maintains the Google Analytics 4 session state for property G-H0MWQX733J | Cookie | 2 years | Analytics — consent required |
| ql-consent | Quantum Light | Records your answers to the questions above — what you allowed and what you did not — so that we can honour them. Set by our website only; the QuantumLight Portal asks for no cookie consent. It holds a randomly generated consent ID, your answers, the version of this policy and the time you answered | Cookie | Six months from your last answer | Strictly necessary — no consent |
| session | Quantum Light | Keeps you signed in to the QuantumLight Portal | Cookie | Your browsing session, or up to 30 days if you asked us to keep you signed in | Strictly necessary — no consent |
| fp.login.remember | Quantum Light | While you sign in, records whether you asked us to keep you signed in | Session storage | Until you close the browser tab | Strictly necessary — no consent |
| react-router-scroll-positions | Quantum Light | Remembers where you were on each page so going back returns you there | Session storage | Until you close the browser tab | Strictly necessary — no consent |
| fp-theme, pref:…, rail-bands, …-nav-width, …-collapsed | Quantum Light | On our website, remembers the interface choices you make: the light or dark theme, which navigation sections and books you keep open, and the widths of the side panels. The QuantumLight Portal keeps these choices with your account instead of on your device (paragraph 5) | Local storage | Until you change the setting, withdraw your consent or clear this site's data | Interface preferences — consent required |
| shared-links | Quantum Light | Remembers the playbooks that have been shared with you by link, so that they stay available to you in the Portal. It holds only the reference contained in the link itself | Local storage | Until you clear this site's data | Strictly necessary — no consent |
| reading | Quantum Light | While you are not signed in, remembers how far you have read each playbook, so the page opens where you left it. It is never sent to us | Local storage | Until you withdraw your consent or clear this site's data | Interface preferences — consent required |
| link_bind | Quantum Light | Ties a sign-in link we email you to the browser that asked for it, so a link that is forwarded or intercepted cannot be used from anywhere else | Cookie | 10 minutes | Strictly necessary — no consent |
| __cf_bm on docs.quantumlightcapital.com | Cloudflare, for Document360 | Tells automated traffic apart from people on the existing playbooks site | Cookie | 30 minutes | Strictly necessary — no consent |
| Cloudflare Turnstile on identity.document360.io | Cloudflare, for Document360 | Checks that a person rather than an automated system is signing in to the playbooks site | Script and associated storage | Your browsing session | Strictly necessary — no consent |
| .AspNetCore.Identity.Application on identity.document360.io | Document360 (identity provider) | Authenticates you when you sign in to read a playbook, and keeps you signed in | Cookie | Your browsing session | Strictly necessary — no consent |
| idsrv.session on identity.document360.io | Document360 (identity provider) | Keeps the record of that sign-in at Document360's identity service, so the playbooks site and the sign-in service agree on who you are | Cookie | Your browsing session | Strictly necessary — no consent |
| clearLoginCarousel on docs.quantumlightcapital.com | Document360 | Remembers that you have passed the sign-in screen, so its introduction is not shown to you again | Cookie | 10 minutes | Interface preferences — see paragraph 5 |
5. INTERFACE PREFERENCES
If you choose a display or interface setting on our website or in the QuantumLight Portal — dark mode, for example, or a collapsed sidebar — we remember it so that the site or the Portal looks the way you left it.
UK law allows us to do this without asking you, under paragraph 6 of Schedule A1 to PECR, provided we tell you what we are doing and let you object. European law contains no equivalent exception. Rather than treat our UK and European readers differently, our website asks for your consent in both cases. You can give or withdraw it at any time, free of charge, from the Cookie Settings link in the footer of our website. If you withdraw it, what we have stored for it is deleted and the site will revert to its default appearance.
The QuantumLight Portal does not ask, because it stores none of these choices on your device. Once you are signed in, every interface choice you make there — the light or dark theme, the widths of the side panels, which navigation sections and books you keep open, that you asked not to be reminded again to add a passkey, and in the admin console the playbook editor's view, split and scroll setting and the reporting window last chosen — is kept with your account, so it follows you between devices. While you are not signed in, the Portal keeps none of them.
One item sits outside this. The clearLoginCarousel cookie is set by Document360 on its own sign-in screen for the playbooks site, which we do not control, so we cannot place it behind our own consent banner. You can remove it through your browser settings.
6. ANALYTICS, AND THE TRANSFER TO GOOGLE
With your consent, we use Google Analytics 4 on our public website to count visitors and understand how people move around the site — which pages are opened, which sections and tabs within a page are opened, how far down the page people scroll, which links they follow away from the site, and when a form is started or sent. This helps us decide what to publish and what to improve. We do not use Google's advertising features, we do not allow Google to use what it collects for its own purposes, and we do not combine what we learn with your QuantumLight Portal account. Google Analytics does not record what you type into a search box, and we do not use it in the QuantumLight Portal.
Google Analytics sends information — including your IP address and the randomly generated identifier stored in the _ga cookie — to Google LLC in the United States.
For readers in the United Kingdom, we rely on the UK Extension to the EU–US Data Privacy Framework, or on the UK International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, as applicable. For readers in the European Economic Area, we rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, or on the Commission's standard contractual clauses, as applicable. Google LLC is certified under both frameworks. You can ask us for a copy of the safeguards at dpo@quantumlightcapital.com.
We do not use Google Analytics, any other third-party analytics technology, or any advertising technology in the QuantumLight Portal.
7. MANAGING COOKIES AND LOCAL STORAGE THROUGH YOUR BROWSER
You can also block or delete cookies, and clear local storage, through your browser settings. If you block our strictly necessary cookies, you will not be able to sign in to the QuantumLight Portal, and parts of the website may not work.
We do not currently respond to "Do Not Track" browser signals, because there is no agreed standard for how a website should interpret them. We do not sell or share personal data for advertising, so there is nothing for a Global Privacy Control signal to switch off.
8. CHANGES TO THIS POLICY
We will update this policy whenever we add, remove or change a technology on the website or the Portal. This version is dated 13 October 2026 (version 1.1). Version 1.1 lists every key the QuantumLight Portal keeps on your device, asks for your consent before remembering your interface choices, records every cookie choice you make, asks again after six months, says what Google Analytics measures on our website, adds the safeguards for readers in the European Economic Area, and removes Google Tag Manager, which we do not use. Version 1.0, dated 11 September 2026, is archived at https://quantumlightcapital.com/cookie-policy/2026-09-11.
9. CONTACT
Email: dpo@quantumlightcapital.com. Post: Data Protection, Quantum Light Management Ltd, 5th Floor, North Side 7/10 Chandos Street, Cavendish Square, London W1G 9DQ.
You have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at www.ico.org.uk. If you are in the EEA you may instead complain to the supervisory authority in your country, or contact our EU representative, whose details are in our Privacy Policy.