Legal
Cookie policy
Four cookies to make the site work, and a question about the rest.
Last updated 26 August 2026
Two groups, and the difference between them is the point. Some storage is what makes the trainer work at all, and there is nothing to decide about it. Everything else waits for you to say yes, and never happens if you don't.
Strictly necessary
Set regardless, because without them the site cannot do what you came for. All are first-party and SameSite=Lax, so they are not sent when another site links into this one in a way that could track you. The two that carry any authority — your sign-in token and your consent choice — are also HttpOnly, meaning no script on the page can read them.
typolo_visitor
A random identifier so a practice attempt can be scored and shown back to you without an account. No name, no email, nothing derived from your device. Expires after 1 year.
typolo_session
Your sign-in token, signed by the server. Set when you sign in, cleared when you sign out. Expires after 30 days.
typolo_text
Remembers which text a Premium reader last chose. Set only when you pick one. Expires after 30 days.
typolo_consent
Your answer to the question below. It exists only so we can honour it and stop asking — which is why it does not itself need permission. Expires after 6 months.
Only if you agree
This records a sample of sessions so we can see where the interface confuses people. The trainer behaves identically either way — nothing is withheld and there is no wall.
Nothing below is loaded until you say yes. Not loaded and switched off — not requested at all. Decline and the scripts are never fetched, so none of this ever exists.
__or_*
Session and user identifiers that tie the parts of one recording together. OpenReplay · localStorage / sessionStorage
That list is what we observed on a live page, not one copied from a vendor's documentation — which is the only way to know it is accurate.
Your choice
Changing your mind is the same single click either way, and withdrawing also clears what the analytics scripts left in your browser.
Measurement that needs no cookie
Page speed is measured with Vercel Speed Insights, which sets nothing at all — no cookie, no local storage, no identifier. We checked rather than taking their word for it. It runs for everyone and there is nothing to opt out of.
Turning cookies off yourself
Every browser can block or clear cookies under its privacy or site-data settings. Clearing the necessary ones signs you out and detaches your practice history — the app keeps working, it simply stops recognising you.
What is not here
No advertising or retargeting cookies, and nothing is sold or shared with advertisers.
No social media pixels — there are no share widgets or embedded feeds.
No third-party fonts or stylesheets. The typefaces are served from this site.
The narration audio comes from Amazon S3 in Frankfurt. Those are plain file requests to a bucket that sets no cookies and holds no account data.
Questions about any of this go to privacy@typolo.app, or support@typolo.app for anything else.