Cookies policy

A cookie is a small piece of text a website asks your browser to remember between visits. Cookies are how we know you are still signed in when you come back tomorrow.

Strictly necessary cookies are always on, without them you cannot sign in or submit a form safely, so no consent is required. Analytics and marketing-attribution cookies are enabled by default (a soft opt-out): the first time you visit we show a small banner where you can reject them with one click, and you can change your decision later in Settings → Privacy at any time.

All optional cookies are first-party, set on the vocabli.app domain (specifically .vocabli.app in production so the same preference applies across subdomains), and live for at most 365 days before they expire and we ask again.

Strictly necessary

Session cookie · essential

Keeps you signed in. Issued by Laravel; expires after 30 days of inactivity.

XSRF-TOKEN · essential

CSRF protection so forms you submit can be verified as coming from your browser. Session-lifetime.

Analytics & marketing (soft opt-out)

vocabli_visitor_id · optional

Anonymous first-party identifier used for product analytics and short-link attribution (so we can tell which lessons people return to). No personal data, no fingerprinting. Expires after 365 days. Scoped to .vocabli.app in production.

vocabli_consent · essential

Records your answer to the consent banner, what is on, what is off, so we don’t ask again. Stored as JSON, expires after 365 days, scoped to .vocabli.app in production.

You can revisit your choices at any time from Settings → Privacy → Cookie preferences. Toggling analytics or marketing off will stop the corresponding tracking on your next page load. Toggling them back on takes effect immediately.

We do not set third-party advertising or social-media cookies on vocabli.app. Payment pages handed off to Stripe are subject to Stripe’s own cookie policy for the duration of the checkout.

Anything unclear? Email [email protected].