Cookie Policy
What we store in your browser · Last updated: 21 October 2026
Our Privacy Policy explains how we collect, use and protect your information. This policy explains the cookies and similar technologies we and our partners use on Language Lab, and the choices you have.
1. What are cookies and similar technologies?
Cookies are small text files that a website stores in your browser so it can remember something — for example that you are signed in or which choices you made — for one visit (“session cookies”) or for longer (“persistent cookies”). Cookies set by the site you visit are “first-party”; cookies set by another company are “third-party”.
Websites and apps also use similar technologies: local storage and session storage (browser storage that keeps information on your device), pixels and tags (small pieces of code that tell a company that a page was viewed or an action happened), and scripts that measure how a page works. In this policy, “cookies” covers all of these.
2. Where we use them
We use cookies on our website language-lab.io (including its language versions), in the Language Lab web app (including beta or invite-only versions) and in the Language Lab app for Android. We do not place cookies on other companies’ websites.
Your lessons, progress, saved words, settings, plan and what Sonia remembers about you are not kept in your browser. They are saved to your account on our servers, so they are there on any device you sign in on. Our Privacy Policy explains how we handle that information.
3. Your choices
- When you first visit, a banner lets you Accept all, Reject all or choose categories. Rejecting is as easy as accepting.
- Strictly necessary cookies are always on because the Services can’t work without them. Analytics and Marketing are off until you switch them on, and nothing in those categories runs before you do.
- You can change your choices at any time with Cookie settings in the footer. Withdrawing consent stops those technologies from collecting more data; data collected before withdrawal isn’t affected.
- In the Android app, Marketing is always off and can’t be switched on. Analytics is one switch in Settings, and it starts off.
- Some browsers and privacy extensions send a Global Privacy Control signal — a standing “don’t sell or share my data” instruction set once in your browser. California and several other US states require us to honour it, so when we see it the Marketing category stays off and its switch is locked, whichever button you press on the banner. Everything else still follows your own choices.
- If your account belongs to someone under 18, Analytics and Marketing stay off regardless of choices.
- We ask again after 13 months, and whenever we change what we ask your consent for.
4. Categories
| Category | Why we use it | Consent? |
|---|---|---|
| Strictly necessary | Sign-in, security and bot protection, remembering your cookie choices and your language, and providing the features you ask for. | Always on |
| Analytics | Understanding how people use Language Lab, measuring performance and fixing problems, including masked session replay. | Only with consent |
| Marketing | Measuring our advertising and showing relevant ads on Meta, Google, TikTok and LinkedIn. | Only with consent |
Separately, some content from other organisations loads only when you use it (see section 6), and Cloudflare measures page performance without cookies (section 5.1).
5. The cookies and storage we use
Names with … contain a varying part. Durations are maximums; your browser may delete cookies sooner (for example, some browsers limit cookies set by scripts to 7 days or 400 days). Cookies from our partners are set and used under their own policies.
5.1 Strictly necessary
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
sb-…-auth-token, sb-…-auth-token-code-verifier | Supabase (for Language Lab) | Local storage | Keeps you signed in and protects the sign-in process. | Until you sign out or the session expires |
ll_consent | Language Lab | Cookie | Stores your cookie choices so the website can respect them from the first page. | 180 days |
ll_consent_v1 | Language Lab | Local storage | Stores your cookie choices, the date and the policy version. | Until you clear it; we ask again after 13 months or when the policy version changes |
ll_anon_id | Language Lab | Local storage | Random identifier that links your cookie choices to our consent record, so we can show what you chose. | Until you clear it |
ll_is_minor | Language Lab | Local storage | Keeps under-18 protections switched on in this browser. | Until you clear it |
ll_locale | Language Lab | Cookie | Remembers which language version of our website you chose. | 1 year |
cf_clearance | Cloudflare (on our domain) | Cookie | Set only if Cloudflare shows a security check: shows that your browser passed it, so you aren’t challenged again. | Up to 1 year |
ll_beta | Language Lab | Cookie (HttpOnly, Secure) | Keeps your session in the invite-only app after you open a personal invitation link. | Up to 7 days, or until the invitation expires |
ll_beta_had | Language Lab | Cookie (HttpOnly, Secure) | Remembers that this browser had an invitation, so we can tell you it has ended instead of showing an error. | 400 days |
ll_beta_seen_at | Language Lab | Local storage | Lets the invite-only app open for a short while when you are offline. | Until you clear it |
ll_reminder_time | Language Lab | Local storage (Android app) | The time you chose for your daily practice reminder. | Until you change it or uninstall the app |
ll_device_stage_ms | Language Lab | Local storage | How long the 3D home screen took to load on this device, so a slow device gets the lighter version. | Until you clear it |
ll-ui-lang.txt | Language Lab | App file (Android app) | Your interface language, so the offline screen speaks your language. | Until you uninstall the app |
| Audio cache | Language Lab | App cache (Android app) | Audio you have played, so it plays again without downloading it twice. | Until the phone clears its cache or you uninstall the app |
ll_active_tab, ll_recovered, ll_launched, ll_from_app, ll_ui_fix | Language Lab | Session storage | Reopen the tab you were on, recover smoothly after an app update, and know whether you came from the Android app. | Until you close the tab |
ll_buy_intent, ll_pending_payment, ll_price_exit | Language Lab | Session storage | Remember the plan you chose before signing in, a payment we are still confirming, and a pricing message you have seen. | Until you close the tab |
ll_google_signup, ll_reset_email, ll_minor_set_here, ll_prev_profile, ll_prev_progress | Language Lab | Session storage | Finish sign-up, sign-in with Google and password reset on the right step, and show what changed since your last visit. | Until you close the tab |
v2_reward_dismissed, nerdie_autoask, nerdie_shutups, nerdie_streak, ll_nerdie_skipped | Language Lab | Session storage | Don’t show again a message or a Nerdie tip you have already closed during this visit. | Until you close the tab |
| Cloudflare Web Analytics | Cloudflare | Script, no cookies or storage | Measures page load speed and errors without identifying or tracking you. Cloudflare receives the page address, referrer, browser type and timing, and derives your country from your IP address. | No storage on your device |
5.2 Analytics (only with your consent)
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
ph_phc_…_posthog | PostHog (EU Cloud) | Cookie | Distinguishes visitors and sessions for product analytics, performance measurement and masked session replay (a sample of sessions; all on-screen text and typed input masked). When you are signed in, linked to your account. | 1 year |
ph_phc_…_primary_window_exists, ph_phc_…_window_id | PostHog | Session storage | Tracks the current browser tab and session. | Until you close the tab |
ll_analytics_session | Language Lab | Session storage | Groups the learning events from one visit in our own analytics records. | Until you close the tab |
_ga | Google Analytics | Cookie | Distinguishes visitors to produce website statistics. Google may process this information in the United States. | 2 years |
_ga_… | Google Analytics | Cookie | Keeps the state of your current visit for website statistics. | 2 years |
5.3 Marketing (only with your consent)
These tags run only after you switch Marketing on, never in the Android app, and never for accounts of under-18s. Not every partner below is active at all times; this list shows every advertising partner whose tags we may use. Only standard events are sent — page views, sign-ups, trial starts and purchases — never lesson, video or scenario titles.
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
_fbp | Meta Platforms (Meta Pixel) | Cookie and pixel | Identifies your browser so Meta can measure visits and sign-ups from our ads and help us reach relevant audiences. For this data, we and Meta are joint controllers. | 90 days |
_fbc | Meta Platforms (Meta Pixel) | Cookie | Set when you arrive from one of our ads on Facebook or Instagram, so Meta can link the visit to that ad. | 90 days |
_gcl_au, _gcl_aw | Google Ads | Cookie | Link a sign-up or purchase to the Google ad you clicked, to measure our campaigns. | 90 days |
_ttp, _tt_enable_cookie | TikTok (TikTok Pixel) | Cookie and pixel | Measure visits and sign-ups from our TikTok ads and help us reach relevant audiences. | 13 months |
li_fat_id | LinkedIn (Insight Tag) | Cookie | Links a visit to the LinkedIn ad you clicked, for conversion measurement. | 30 days |
li_sugr, bcookie, lidc, UserMatchHistory, AnalyticsSyncHistory | LinkedIn (on linkedin.com) | Third-party cookies | Recognise your browser for LinkedIn’s ad measurement and audience matching, and route requests to the right LinkedIn data centre. | From 1 day (lidc) to 1 year (bcookie); li_sugr 90 days; the others 30 days |
If you are logged in to Facebook, Instagram, Google, TikTok or LinkedIn, these companies may also use their own cookies on their own domains under their own policies.
6. Content from other organisations
| Content | When it loads | What happens |
|---|---|---|
| YouTube videos (privacy-enhanced mode, youtube-nocookie.com) | Only when you press play. Until then we show our own image, not one from YouTube. | Google receives your IP address and browser information and may use browser storage under its own policy. |
| Dodo Payments checkout | When you go to checkout | Dodo Payments uses its own cookies on its checkout pages. |
| Google sign-in | When you choose “Continue with Google” | Google uses its own cookies on its sign-in pages. |
7. How we record your choices
When you make or change a choice, we store a record with a random device identifier, your account ID if you are signed in, the categories you allowed, the policy version, how you made the choice (for example “reject all”), your browser type and the time. We use it only to show that we respected your choices. We keep consent records while the choice is in use and for 3 years afterwards (see Annex A of our Privacy Policy). If you joined our earlier waitlist, we also recorded the version of the consent text you saw.
8. Controlling cookies in your browser
You can also block or delete cookies and browser storage in your browser settings, usually under “Privacy” or “Site data”. If you block strictly necessary cookies or clear site data, you may be signed out or be unable to use parts of the Services; your progress stays safe in your account. Guides: aboutcookies.org. For interest-based advertising choices see youronlinechoices.eu (EU) and optout.aboutads.info (US). Google offers a Google Analytics opt-out add-on, and Meta lets you manage ad preferences in your Meta account settings.
9. United States: opt-out of sale or sharing
Some US state laws treat analytics and advertising cookies from other companies as a “sale” or “sharing” of personal information. To opt out, turn off Analytics and Marketing in Cookie settings or enable Global Privacy Control. Your choice applies to the browser and device you use. See section 11.4 of our Privacy Policy.
10. Changes
We review this policy regularly and whenever we add or remove a technology. We update the date at the top and, where the change affects what we ask your consent for, show the banner again.
11. Contact
Questions about cookies: [email protected]. More about how we handle your information: Privacy Policy.
Adapted from Automattic’s Legalmattic Cookie Policy (CC BY-SA 4.0). This document is licensed under CC BY-SA 4.0.
© 2026 Settlebuddy Technologies. All rights reserved.
We use strictly-necessary storage to sign you in, keep the site secure and deliver the service you ask for. We’d also like your consent for optional categories. You can accept all, reject the non-essential ones, or choose per category. Read our Cookie Policy and Privacy Policy. You can change your choice any time from the Cookie Policy page.