Typolo is in active development. as a first tester and get a year of Premium free →

Legal

Cookie policy

Four cookies to make the site work, and a question about the rest.

Last updated 26 August 2026

Two groups, and the difference between them is the point. Some storage is what makes the trainer work at all, and there is nothing to decide about it. Everything else waits for you to say yes, and never happens if you don't.

Strictly necessary

Set regardless, because without them the site cannot do what you came for. All are first-party and SameSite=Lax, so they are not sent when another site links into this one in a way that could track you. The two that carry any authority — your sign-in token and your consent choice — are also HttpOnly, meaning no script on the page can read them.

typolo_visitor

A random identifier so a practice attempt can be scored and shown back to you without an account. No name, no email, nothing derived from your device. Expires after 1 year.

typolo_session

Your sign-in token, signed by the server. Set when you sign in, cleared when you sign out. Expires after 30 days.

typolo_text

Remembers which text a Premium reader last chose. Set only when you pick one. Expires after 30 days.

typolo_consent

Your answer to the question below. It exists only so we can honour it and stop asking — which is why it does not itself need permission. Expires after 6 months.

Only if you agree

This records a sample of sessions so we can see where the interface confuses people. The trainer behaves identically either way — nothing is withheld and there is no wall.

Nothing below is loaded until you say yes. Not loaded and switched off — not requested at all. Decline and the scripts are never fetched, so none of this ever exists.

__or_*

Session and user identifiers that tie the parts of one recording together. OpenReplay · localStorage / sessionStorage

That list is what we observed on a live page, not one copied from a vendor's documentation — which is the only way to know it is accurate.

Your choice

You currently allow analytics and session recording.

Changing your mind is the same single click either way, and withdrawing also clears what the analytics scripts left in your browser.

Page speed is measured with Vercel Speed Insights, which sets nothing at all — no cookie, no local storage, no identifier. We checked rather than taking their word for it. It runs for everyone and there is nothing to opt out of.

Turning cookies off yourself

Every browser can block or clear cookies under its privacy or site-data settings. Clearing the necessary ones signs you out and detaches your practice history — the app keeps working, it simply stops recognising you.

What is not here

No advertising or retargeting cookies, and nothing is sold or shared with advertisers.

No social media pixels — there are no share widgets or embedded feeds.

No third-party fonts or stylesheets. The typefaces are served from this site.

The narration audio comes from Amazon S3 in Frankfurt. Those are plain file requests to a bucket that sets no cookies and holds no account data.

Questions about any of this go to privacy@typolo.app, or support@typolo.app for anything else.