Cookie Policy
Last updated: 14 October 2026
This page lists, one by one, the cookies and other data NuovaLingua stores in your browser, what they are for and how long they stay. We use no behavioural analytics tools (no Google Analytics or similar) and no cookies to show you ads elsewhere.
1. What they are
A cookie is a small text file the site stores in your browser so it can recognise you on the next request: to keep you signed in, remember your language, protect you from abuse. We also use two browser “memories” similar to cookies: local storage (localStorage) for app preferences, and a small local database (IndexedDB) so a lesson's audio is not lost if the upload fails.
2. Necessary cookies (always on)
They are needed for the site to work and require no consent. Legal basis: our legitimate interest in providing a secure, working service (and the exemption for technical cookies under the ePrivacy Directive and the Polish Telecommunications Law).
- next-auth.session-token (on the public site “__Secure-next-auth.session-token”) — keeps you signed in. Duration: 30 days, renewed on each visit.
- next-auth.csrf-token — protects sign-in and forms from forged requests (CSRF). Duration: browser session.
- next-auth.callback-url — remembers which page to return you to after sign-in. Duration: browser session.
- gcal_state — secures the Google Calendar connection while you authorise it. Duration: 10 minutes; created only if you start the connection yourself.
- nl-cookie-consent (localStorage) — records your cookie choice, with date, version and the list of providers it covers, so we do not ask again. Duration: until you change it or clear your browser.
- nl-registrazioni (IndexedDB) — a lesson's audio awaiting upload, only if the first upload attempt failed. Duration: at most 48 hours, then it deletes itself.
- nl-livello — the result of a level test taken without an account (only the level, for example “B1”), so it is not lost if you sign up right after, also with Google. Duration: 7 days, or until you create the account.
- nl-ref — the code of an invitation link, only if you arrive from an invitation and choose “Continue with Google”, to link your sign-up to the person who invited you. Duration: 30 minutes.
3. Functional cookies (always on)
They remember your preferences. They track nothing.
- nl-locale — the interface language (Italian, Polish or English). Duration: 1 year.
- nl-lingua — the language you study. Duration: 1 year.
- App preferences (localStorage) — for example panels you closed, the hidden starter checklist, the theme. Duration: until you clear your browser.
4. Measurement cookie (only with your consent)
- nl-src — a single word saying which channel you found us through, for example “instagram” or “google”, taken from the link you arrived with or from the referring page. It contains no identifiers, is shared with no one and, if you later sign up, that word is copied into your account to count which channels work. Duration: 90 days. Without consent it is not written.
5. Marketing cookies (only with your consent)
- Meta pixel (Facebook and Instagram) — loads only if you accept marketing cookies. It tells Meta that a page was viewed, that you completed the trial exercise on the home page or that you signed up, so we know whether an ad worked. Meta may in turn set its own “_fbp” cookie (90 days) and link these events to your Facebook or Instagram profile under its own policy. We do not use it to show you ads elsewhere. Without consent it is not loaded at all.
6. Third-party services you use inside the Platform
Some features rely on external services that may store their own technical data in your browser while you use them: Stripe during payment (the payment page is hosted by Stripe), Daily during the video call, Google during sign-in with Google or calendar connection. They do not start unless you use those features and are governed by those providers' policies.
7. How to choose and change your mind
On your first visit the banner offers three choices of equal weight: accept all, use only necessary cookies, or choose purpose by purpose. You can change your mind at any time via “Cookie preferences” in the footer: the new choice applies immediately. You can also delete or block cookies in your browser settings; blocking the necessary ones breaks sign-in.
8. Changes and contact
When we add or remove a cookie we update this page and the date at the top; if the change concerns cookies subject to consent, the banner will ask for your choice again. Questions: privacy@nuovalingua.com.