Cookies
Cookie policy
This policy describes what the website and the application store in your browser, the purpose of each item and how long it lasts. Only the technical storage required for operation is used; nothing tracks you across websites.
Version of 23 October 2026
1. Storage used
εpsγlo sets no analytics cookies, no advertising cookies and no tracker of any kind. Every item listed below is technical storage required for the website and the application to function. Under article 122 of the Italian Privacy Code and the guidelines of the Garante, such storage requires no consent, only this notice.
2. Items stored
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token (localStorage) | εpsγlo (Supabase Auth) | Keeps you signed in between visits. It holds your session tokens; nothing else reads it. | Until you sign out, or the session expires. |
| ht.signInRequested (localStorage) | εpsγlo | Remembers that this browser asked for a sign-in link, so the link signs in here without a further question, and a link nobody here asked for asks first. It holds a time and nothing else. | Until the link is used, and two hours at most. |
| ht.theme, ht.marketing.lang and other ht.* keys (localStorage) | εpsγlo | Your chosen theme, the language of the website, the order of the tabs on a phone, and other preferences that require no account. | Until you clear them. |
| ht.consent (localStorage) | εpsγlo | Your answer to the cookie banner, if one is ever shown. At present none is shown, and this key is not written. | Until you clear it. |
| IndexedDB (vocabulary, device copy, Learn) | εpsγlo | The vocabulary bank and a copy of your account state, so that the application opens immediately and works offline. | Until you clear the site data or delete the account from this device. |
| Paddle checkout cookies | Paddle | Checkout session state; loaded only while the checkout is open. | Session. |
| Paddle fraud-prevention cookies | Paddle | Fraud prevention during checkout. | Up to 1 year, set by Paddle. |
| __cf_bm | Cloudflare, when bot protection is enabled | Distinguishes people from automated traffic. | 30 minutes of inactivity. |
| cf_clearance | Cloudflare, when challenges are enabled | Records that a security challenge has been passed. | 30 minutes by default; depends on the deployed Challenge Passage setting. |
3. Consent banner
Because only technical storage is used, no consent banner is displayed at present. If a non-essential category is introduced, its scripts will be registered and withheld until consent is given. The consent mechanism records one choice per category; registration alone does not authorise a script to run.
4. Third-party scripts
- 4.1Paddle.js is loaded only when you open the checkout. The billing portal runs on Paddle’s own website. Google sign-in redirects you to Google only when you choose it. Fonts are self-hosted. No advertising script is loaded.
- 4.2Every page, including the application, loads Cloudflare Web Analytics, a small script that counts page views, referring pages and load times. It sets no cookie, writes nothing to your browser’s storage, does not fingerprint your device and does not follow you across websites. Cloudflare reports the figures to us only in aggregate.
5. Deleting stored items
Your browser’s settings allow you to delete this website’s storage or to block it altogether. Blocking it prevents the application from keeping you signed in and from working offline; everything else on the website works without it. Signing out removes the session token; deleting the account removes the device copy on the next load.
6. Changes to this policy
When a new item is stored, or a listed item changes purpose or duration, this page is updated and the date at the top is updated with it. Anything that would require consent is preceded by the banner described above, not merely by an edit to this page.