Legal 路 Cookie Policy
Cookie Policy
The short version: We use essential cookies to keep you logged in and the Service running, plus privacy-friendly, cookieless Vercel Analytics for aggregate traffic. Only with your consent do we load the Meta (Facebook) Pixel for advertising, Microsoft Clarity for product analytics and session replay, and Google Analytics for traffic analytics. The Vimeo video player uses its own cookies for playback.
What is a cookie?
A cookie is a small text file that a website stores in your browser. We also use similar technologies such as local storage. Together we refer to them as "cookies" in this policy.
Cookies we use
Strictly necessary
These cookies are essential to operate the Service. They cannot be disabled while still using the Service.
- Supabase Auth cookies: keep you signed in across page navigations. Set by our authentication provider, Supabase. HTTP-only, Secure, SameSite=Lax. Lifetime: session and refresh tokens, typically 1 hour and 30 days.
- CSRF / session safety: protect form submissions and server actions.
Functional
- Preference storage: remembers minor UI choices such as collapsed sections in the curriculum sidebar. Lifetime: up to 12 months.
Analytics
We use Vercel Analytics to understand aggregate traffic (page views and performance). It is privacy-friendly: it does not use cookies, does not track you across other websites, and does not build an advertising profile of you. Because it is cookieless and anonymous, it runs without a consent prompt.
Advertising
With your consent, we load the Meta (Facebook) Pixel to measure and improve our advertising. It sets cookies and may share event data with Meta Platforms, Inc. The Pixel loads only after you choose "Accept all" in our cookie banner. Choose "Necessary only" and it never loads. You can change your choice at any time by clearing this site's cookies and local storage.
Product analytics and session replay
With your consent, we load Microsoft Clarity to understand how the site is used and improve it. Clarity records how visitors interact with pages (such as clicks, scrolling and mouse movement), builds aggregate heatmaps, and may replay anonymised sessions. It sets its own cookies and shares this usage data with Microsoft. Clarity loads only after you choose "Accept all" in our cookie banner. Choose "Necessary only" and it never loads. See Microsoft's privacy statement.
We also use Google Analytics 4 with Google Consent Mode to understand aggregate traffic (visits, pages viewed, referral sources) and improve the site. Until you choose "Accept all", it runs in a restricted, cookieless mode: it sets no cookies, and sends only anonymous, aggregated signals to Google. Only after you choose "Accept all" does it set its cookies (such as _ga) and measure your visit normally. Choose "Necessary only" and it stays cookieless. See Google's privacy policy.
Third-party (video player)
Lesson videos are embedded from Vimeo. Vimeo sets its own cookies and local-storage entries to play the video, remember your playback position, and measure performance. We do not control these. See Vimeo's cookie policy.
Managing cookies
You can clear or block cookies in your browser settings. Blocking the strictly necessary cookies will prevent you from logging in. We will respect the Global Privacy Control (GPC) signal where required by law.
Changes
We may update this policy if our cookie use changes. The effective date at the top will be updated accordingly.