Cookie Policy
This Cookie Policy explains the cookies, browser local storage, and similar technologies used by DELF Prep, what each one does, how long it lasts, and how to control them. It forms part of our Privacy Policy.
- We use strictly necessary, functional, analytics, and operational cookies.
- Analytics (PostHog) are off until you consent where consent is required; you can opt out anytime.
- The full registry below lists every cookie and storage key, its purpose, and how long it lasts.
- Strictly necessary cookies keep you signed in and secure and cannot be disabled while using the platform.
This summary is for convenience only. The full text below is what governs.
What these technologies are
Cookies are small text files placed on your device by your browser when you visit a website. Local storage and session storageare similar browser mechanisms for storing structured data on your device. We collectively call all of these "cookies and similar technologies" in this Policy.
First-party cookies are set by us. Third-party cookies are set by service providers we use, such as our analytics provider.
Categories we use
- Strictly necessary. Required for the platform to function — authentication, CSRF protection, and storing your consent decision. These cannot be disabled while using the platform.
- Functional. Remember preferences and dismissed banners. Disabling these may reduce the quality of the experience but does not break core features.
- Analytics. Help us understand how the platform is used in aggregate. We use PostHog, Inc. for analytics, and we set analytics cookies only after you consent where consent is required.
- Operational. Set by our hosting and security layers to detect abuse, prevent brute-force login attempts, and rate-limit sensitive routes.
Cookies & storage keys we set
The list below covers the cookies and storage keys currently in use:
| Name | Category | Type | Party | Purpose | Duration |
|---|---|---|---|---|---|
session / auth token | Strictly necessary | Cookie | First-party | Keeps you signed in to your account between requests. | Session, with rolling extension on activity |
CSRF token | Strictly necessary | Cookie | First-party | Protects authenticated requests from cross-site request forgery. | Session |
consent decision | Strictly necessary | Local storage | First-party | Remembers whether you accepted or declined analytics cookies so we do not ask again. | Up to 12 months |
in-product preferences | Functional | Local storage | First-party | Remembers settings and dismissed banners so the experience matches how you used the site before. | Up to 12 months |
posthog_* | Analytics | Cookie | Third-party | PostHog product analytics — a randomly generated identifier and event metadata used to measure feature usage and detect issues. Set only after consent where consent is required. | Up to 12 months |
rate-limit / security identifiers | Operational | Cookie | First-party | Helps detect abuse, brute-force login attempts, and bot activity. Set transiently when sensitive routes are accessed. | Up to 7 days per identifier |
We may add or change entries over time. When we do, we will update this Policy and revise the "Last updated" date.
Consent
Where required by applicable law (for example, for visitors in the EEA, the UK, or Quebec), we present a consent banner before setting analytics cookies. Analytics stay off until you accept. You can change your choice at any time; declining analytics does not affect your ability to use the platform.
How to control cookies
You can manage or delete cookies through your browser settings. The links below point to current instructions from each browser vendor:
Disabling strictly necessary cookies will prevent you from signing in or using core features. Disabling functional cookies will reset your preferences. Disabling analytics or operational cookies will not affect your ability to use the platform.
Analytics opt-out
Our analytics are provided by PostHog, Inc. We configure PostHog so that the identifier is randomly generated rather than derived from your email address. You can opt out through the consent banner, your browser's privacy controls, or, where available, an in-product analytics toggle. For more information, see PostHog's privacy policy.
Do Not Track & GPC
Some browsers send a Do Not Track (DNT) signal. There is no industry consensus on how DNT signals should be honoured, and we do not currently change our behaviour based on a DNT signal. Where applicable law requires us to honour a Global Privacy Control (GPC) or similar opt-out signal, we honour it as required by that law.
Changes & contact
We may update this Cookie Policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date and version. Questions can be sent to support@delfprep.com.