Legal Document
Cookie Policy
This Cookie Policy explains how Worddemy ("we", "us", "our") uses cookies and similar tracking technologies on the Worddemy web application ("Platform"). It should be read alongside our Privacy Policy and Terms of Service. By continuing to use our Platform after being shown our cookie consent banner, you agree to the use of cookies as described in this Policy.
1.What Are Cookies?
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, remember your preferences, and provide information to site owners about how their service is used.
Cookies are not programs and cannot carry viruses or install malware on your device. They can only be read by the website that set them and are deleted when they expire or when you clear your browser data.
In addition to cookies, we may use similar technologies such as web beacons, pixel tags, local storage (localStorage/sessionStorage), and session identifiers. This Policy covers all such technologies collectively.
2.How We Use Cookies
We use cookies to:
- —Keep you logged in to your Worddemy account across page navigations and browser sessions.
- —Remember your preferences such as theme (light/dark mode) and sidebar state.
- —Protect your account and session against cross-site request forgery (CSRF) attacks.
- —Record your cookie consent choice so we don't ask again unnecessarily.
- —Enable payment and subscription flows via Gumroad (our payment provider).
- —Understand aggregate usage of the Platform via Google Analytics, but only once you've accepted the Analytics category in the consent banner.
3.Types of Cookies We Use
| Category | Cookie / Technology | Purpose | Duration |
|---|---|---|---|
| Strictly Necessary | Supabase auth token (sb-*) | Authentication session — keeps you logged in. Without this cookie the Platform cannot function. | Session / up to 1 year |
| Strictly Necessary | CSRF token | Security — prevents cross-site request forgery attacks on your account. | Session |
| Strictly Necessary | Cookie consent record (CookieYes) | Stores your consent choice (Accept All / Essential Only) so the banner does not reappear. | 1 year |
| Functional | localStorage: theme, sidebar state, Wordy position, remembered login email | Remembers your UI preferences (and, if you tick “Remember me”, your login email) across visits. | Persistent (until cleared) |
| Functional | localStorage / sessionStorage: in-progress exam state, vocabulary cache, drafts | Saves your in-progress practice tests, recently viewed vocabulary, and tool drafts on your own device so a refresh or accidental navigation does not lose your work. Never sent to third parties. | Up to 2 hours (exam state) / tab session |
| Payment / Third-party | Gumroad cookies | Set by Gumroad during the checkout flow to enable payment processing and prevent fraud. | Session / as set by Gumroad |
| Analytics | Google Analytics (_ga, _ga_*) | Measures aggregate site usage (pages visited, session duration, traffic sources) so we can improve the Platform. Only set after you accept the Analytics category below. | Up to 2 years |
We do not use advertising cookies, third-party tracking cookies, or cookies for cross-site behavioural profiling.
4.Consent Management — CookieYes
We use CookieYes as our consent management platform (CMP). CookieYes displays our cookie consent banner, records your preference, and ensures that non-essential cookies are only activated after you give your consent.
4.1 How Your Consent Is Recorded
- —When you visit the Platform for the first time, a consent banner appears, informing you about our use of cookies.
- —Your choice is stored in a CookieYes consent cookie on your device, valid for 1 year, so the banner does not reappear on your next visit.
- —You may change your cookie preference at any time by clearing your browser cookies (which resets the CookieYes consent record) and revisiting the site.
4.2 What the Consent Banner Controls
Worddemy sets Strictly Necessary cookies (authentication, CSRF protection, and the CookieYes consent record itself) and Functional local storage (see Section 3) regardless of your choice, since the Platform cannot function without them. The banner's Analytics category controls Google Analytics: it only activates after you accept that category, and stays off if you choose Essential Only. We do not use advertising or cross-site tracking cookies. If we introduce further non-essential cookie categories in the future, we will update this Policy and the consent banner accordingly before activating them.
5.Third-Party Cookies
5.1 Gumroad
When you initiate a subscription or top-up credit purchase, you are redirected to a Gumroad-powered checkout. Gumroad may set its own cookies on your device for fraud prevention and payment session management. These cookies are governed by Gumroad's own Cookie Policy and Privacy Policy, available on their website. We do not control Gumroad's cookies.
5.2 Google (OAuth)
If you use "Continue with Google" to sign in, Google may set authentication cookies on its own domain (accounts.google.com) as part of the OAuth flow. These are governed by Google's Privacy Policy. We do not receive or store these Google-domain cookies.
5.3 Google Analytics
We use Google Analytics to understand aggregate usage of the Platform (e.g. which pages are visited, how long sessions last, and general traffic sources). Google Analytics only loads and sets cookies after you accept the Analytics category in the consent banner. Data collected is processed by Google in accordance with Google's Privacy Policy. You can opt out of Google Analytics tracking across all websites using the Google Analytics Opt-out Browser Add-on, or by rejecting the Analytics category in our consent banner.
6.How to Manage and Delete Cookies
6.1 Via the Consent Banner
You can update your cookie preferences at any time by clearing your browser cookies (which will reset the CookieYes consent record) and revisiting the Platform — the consent banner will reappear. If you have any questions about our cookie use, contact us at .
6.2 Via Your Browser Settings
Most browsers allow you to manage cookies through their settings menu. The following links will take you to the relevant help pages for the most common browsers:
- —Google Chrome: Settings → Privacy and security → Cookies and other site data
- —Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- —Safari: Preferences → Privacy → Manage Website Data
- —Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies
Please note that disabling strictly necessary cookies will prevent you from logging in to Worddemy, as authentication relies on session cookies.
6.3 Do Not Track (DNT)
Some browsers offer a "Do Not Track" signal. We do not currently respond to DNT signals automatically, since browser support for the signal is inconsistent; instead, you can control Google Analytics tracking directly through our consent banner (Section 4) by choosing Essential Only.
7.Legal Basis for Cookie Use (GDPR)
For users in the EU, EEA, and UK, our legal basis for setting cookies is:
| Cookie Category | Legal Basis |
|---|---|
| Strictly Necessary | Legitimate Interests (Art. 6(1)(f)) — essential for the secure operation of the Platform. Consent is not required. |
| Functional | Legitimate Interests (Art. 6(1)(f)) — remembers non-identifying UI preferences (theme, layout) to support normal use of the Platform. |
| Payment (Gumroad) | Performance of Contract (Art. 6(1)(b)) — necessary to process your subscription payment. |
8.Changes to This Cookie Policy
We may update this Cookie Policy to reflect changes in the cookies we use, changes in the law, or improvements to our consent management. When we make material changes we will update the "Last Updated" date at the top of this page and, where required, re-display the consent banner to collect fresh consent. We encourage you to review this Policy periodically.
Questions About Cookies
Worddemy — Privacy Team
For any questions about our use of cookies or to exercise your data rights:
General support:
This Cookie Policy forms part of our Privacy Policy. For a full description of how we handle your personal data, please read our Privacy Policy.