Cookie Policy

Essential cookies

These are the only cookies Zippylang sets. They are required for the service to work and cannot be turned off, because without them a teacher cannot stay signed in.

• Sign-in cookies (Supabase). When a teacher or administrator signs in, our authentication provider sets cookies that identify the signed-in session and allow it to be refreshed as they move between pages. These are removed when the session ends or the user signs out.
• Pupil session cookie (zippy_student_session). When a pupil joins their class we set one cookie of our own. It is signed by our servers, so it cannot be edited or forged, and it is marked HTTP-only, so scripts running in the page — including anything injected into it — cannot read it. It holds only which pupil, class and school the session belongs to: no name, no progress and no message. It is what stops one pupil's work being posted onto a classmate's account, so it cannot be turned off while a pupil is using Zippylang. Signing the pupil out removes it, and it expires on its own after 180 days.

Information stored on the device

As well as cookies, Zippylang keeps a small amount of information in the browser's local storage. This never leaves the device except where it is needed to load that pupil's own lessons and progress:

• Pupil name and account reference — so a pupil does not have to rejoin their class every time they open the app
• Class and year group — so the app loads the right lessons for that pupil
• Chosen language — so the app opens in the language the pupil or class is learning
• Experience points — a copy of the pupil's XP so their total appears immediately when the app opens. The real total, along with their streak and badges, is held in their account rather than on the device
• Game high scores — kept on the device so a pupil can beat their own best
• Display preferences — small choices such as whether to show all levels
• Your cookie choice — so we do not ask again on every visit

Analytics and advertising

Zippylang does not currently use any analytics or advertising cookies. We do not use Google Analytics or any comparable third-party analytics service, we do not run advertising, and we do not sell or share data with advertisers or data brokers.

The cookie panel used to offer an “analytics” switch and a “functional” switch. Neither controlled anything — there is no analytics tool to enable, and the preferences the second one claimed to govern were stored either way — so both have been removed. A consent control that does not control anything invites a school to record a decision it has not made. If we ever introduce something optional, the switch will come back, wired to the thing it turns off, and we will update this page and tell schools before it takes effect.

Third-party services

Some parts of Zippylang call services run by other companies. These are used to deliver the product, not to track you:

• Supabase — sign-in and database (sets the essential cookies described above)
• Anthropic — powers the Zippy AI tutor
• Google Cloud Text-to-Speech — spoken pronunciation of vocabulary
• Stripe — payment and subscription management for schools. Stripe may set its own cookies on its checkout pages, which are governed by Stripe's own policies.

Managing your choices

When you first visit Zippylang you are shown a cookie notice where you can accept the notice, or open the panel to see exactly what is stored. There is nothing optional to switch off, because Zippylang sets no optional cookies — we would ask again before that changed. Your choice is remembered on that device.

You can change your mind at any time by clearing your browser's data for this site, which will make the cookie notice appear again on your next visit. You can also block or delete cookies in your browser settings, though blocking the essential sign-in cookies will prevent teachers from signing in.