Cookie Policy

The short version

• Strictly necessary cookies keep you signed in and remember your language. They are always on.
• Analytics (Google Analytics 4) and advertising (Google AdSense) cookies load only after you allow that category in the cookie banner.
• Until you decide, Google's tags run with Google Consent Mode v2 defaults that deny analytics and advertising storage, so no advertising cookies are set.
• You can change your mind at any time. The button below (and “Cookie settings” in the footer) reopens the banner, and switching a category off applies immediately.

Strictly necessary cookies

These are required for the site and its features to work. They cannot be switched off, and they do not track you across other sites.

sb-…-auth-token (Supabase)

Keeps you signed in and lets the account features read and write your own progress. Removed when you sign out. Set only once you use a feature that needs an account.

NEXT_LOCALE

Remembers the language you picked so the site does not switch back. 365 days, whole site, SameSite=Lax.

Local storage (on your device only)

Your cookie choice, so the banner is not shown again, and the id of the last certificate you claimed. Never sent to us.

Analytics cookies — with your consent

If you allow analytics, Google Analytics 4 sets the _ga and _ga_* cookies (typically up to 13 months) to measure page views and lesson events. Until you accept, the GA4 tag is not loaded at all and no request is made to Google. These statistics are not tied to your account and switch off immediately if you withdraw consent.

Advertising cookies — with your consent (Google AdSense)

Ads keep the lessons free. If you allow advertising, Google AdSense and its advertising partners may set cookies and read device identifiers to serve, limit and measure ads — and, when you allow it, to personalise them. Google may also combine this data with information from other sites where you have allowed it.

• Before consent: the AdSense tag runs with Consent Mode v2 defaults, so ad_storage, ad_user_data and ad_personalization are denied, ad-click identifiers are redacted from measurement pings, and no ad unit is rendered on the page.
• After consent: ad units render and Google may set advertising cookies and show personalised ads.
• Withdrawing consent: switch advertising off and Google receives an immediate consent update denying advertising storage; ad units are removed from the page.

You can also control personalised advertising directly with Google — Google Ads Settings — and read how Google uses data from partner sites in Google's partner-sites notice and Google's cookie notice.

Other services we use

• Cloudflare hosts and serves the site and may set strictly-necessary security cookies. It does not use them to build advertising profiles.
• Supabase provides authentication and the database, which is what the session cookie above belongs to.
• Polar.sh is the merchant of record for the Verifiable Certificate Pass; its checkout sets the cookies it needs to process a payment securely on its own pages.
• Google provides Analytics (with your consent) and AdSense (with your consent), as described above.

Managing cookies in your browser

Every browser lets you block or delete cookies, and blocking cookies will not stop the lessons from working — you may simply have to sign in again and reset your language. The settings live under “Privacy” or “Cookies” in your browser's preferences. To change what this site is allowed to do, use the button below instead; it updates your choice on this device straight away.