Cookie Policy

Last updated: 07.05.2026. v.0.2.
Website: Zunge.online
Controller: Zunge Online LTD
Registered address: Lapathou 6, Strovolos, 2027 Nicosia, Cyprus
Company registration number: HE 487889
Contact email: privacy@zunge.online

This Cookie Policy explains how we use cookies and similar technologies on our website, including browser localStorage, analytics technologies, and security tools.

This Cookie Policy should be read together with our Privacy Notice, which explains how we process personal data more generally.

For questions about this Cookie Policy or our use of cookies and similar technologies, please contact us using the email address or postal address stated above.

Cookies are small text files stored on your device when you visit a website. They help websites function, improve security, remember user choices, and, where permitted, analyse how visitors use the website.

We also use similar technologies, such as browser localStorage. LocalStorage is not technically a cookie, but it can store information on your device and is therefore disclosed in this Cookie Policy.

We use certain cookies and similar technologies because they are strictly necessary to provide the website, protect the security of the service, enable account access, process login requests, or remember your privacy choices.

Where cookies or similar technologies are not strictly necessary, for example analytics cookies, we use them only with your prior consent. You may withdraw or change your consent at any time through the Privacy Settings link available on our website: .

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

We use the following categories of cookies and similar technologies:

  1. Strictly necessary cookies and storage — These are required for website security, login, account access, fraud prevention, form protection, and remembering your cookie choices. These technologies are not optional where they are necessary for the service you request.
  2. Functional or preference storage — These help remember settings or maintain access to your account. Some of these technologies may be necessary for the logged-in service.
  3. Analytics cookies — These help us understand how visitors use our website and improve our online services. We use analytics cookies only with your prior consent.
  4. Security technologies from third-party providers — These help protect our forms and accounts from bots, spam, abuse and automated attacks.
  5. Third-party asset providers — Some providers serve fonts, icons, scripts, or other static assets. These providers may receive technical connection data when your browser requests those assets.

When you first visit our website, you can manage your cookie choices through our cookie banner.

You can:

  • accept non-essential cookies;
  • reject non-essential cookies;
  • change or withdraw your consent at any time through the Privacy Settings: ;
  • delete or block cookies through your browser settings. Your browser settings usually allow you to view, delete, block, or restrict cookies and other site data. The exact steps depend on the browser you use.

Please note that blocking strictly necessary cookies or browser storage may affect login, account access, payment security, form submission, or other core website functions.

These technologies are used to provide the website securely and to enable functions requested by you.

Name or technology Provider Type Purpose Storage period
XSRF-TOKEN zunge.online First-party HTTP cookie Protects forms and API calls against Cross-Site Request Forgery attacks. Session
.AspNetCore.Correlation.Google.* zunge.online First-party HTTP cookie Temporary security cookie used during the Google sign-in flow to prevent login CSRF. Created only while a user is logging in with Google. Approximately 15 minutes, deleted after callback
.AspNetCore.ExternalCookie / .AspNetCore.Identity.External zunge.online First-party HTTP cookie Temporarily holds the external Google identity between the OAuth callback and account linking. Session, deleted after sign-in completes
cookie_consent zunge.online First-party browser localStorage Stores your cookie banner choice (granular: necessary + analytics). Persistent until cleared by the user
Authentication/session entries written by Blazored.LocalStorage, such as JWT access token, refresh token, and cached user profile zunge.online First-party browser localStorage Keeps the user signed in to the Blazor WebAssembly client and enables account access. Persistent until logout or until cleared by the user

Authenticated sessions on Zunge.online are based on JWT bearer tokens stored in browser localStorage, not on a persistent .AspNetCore.Cookies session cookie.

We use Google Analytics to understand how visitors use our website and to improve our online services. Google Analytics is loaded only after you give consent through the cookie banner.

The legal basis for analytics cookies is your consent.

Name Provider Domain Purpose Storage period
_ga Google Analytics .zunge.online Distinguishes unique users. 2 years
_ga_80322B7G7J Google Analytics .zunge.online Persists session state for the GA4 property. 2 years
_gid Google Analytics .zunge.online Distinguishes users for 24 hours. 24 hours
_gat / _gat_gtag_* Google Analytics .zunge.online Used to throttle request rate. 1 minute

Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on possible international transfers relating to Google Analytics is provided in section 11 below.

We use Cloudflare Turnstile on login, registration and contact forms to protect the website against bots, spam, abuse and automated attacks.

Cloudflare Turnstile may set the following cookies:

Name Provider Domain Purpose Storage period
__cf_bm Cloudflare .challenges.cloudflare.com Bot-management cookie used by Turnstile to distinguish humans from bots. 30 minutes
cf_clearance Cloudflare .challenges.cloudflare.com Records that a Cloudflare challenge has been passed. Up to 1 year

These cookies are used for security and fraud-prevention purposes. Cloudflare may process technical data such as your IP address, device information, browser information, challenge results, and other data needed to verify that the request is not abusive or automated. Information on possible international transfers relating to Cloudflare Turnstile is provided in section 11 below.

Our website may load static assets from third-party providers. According to our current technical inventory, these providers typically do not set cookies through our website, but your browser may contact their servers to load fonts, icons, scripts or similar assets.

Provider or domain Purpose
fonts.googleapis.com, fonts.gstatic.com Google Fonts, including Montserrat
cdnjs.cloudflare.com, cdn.jsdelivr.net Static assets, such as GSAP and Bootstrap Icons
googletagmanager.com Google Analytics loader, loaded only after consent

When your browser contacts these providers, technical data such as your IP address, browser type, device information, referring page and time of access may be transmitted.

Embedded YouTube content

Our website may include embedded course-related videos or study materials from YouTube. YouTube is operated by Google. Embedded YouTube content may use cookies or similar technologies, or cause your browser to transmit technical data to Google, when the video player is loaded or activated.

Where embedded YouTube content is not strictly necessary for the website function requested by you, it will be loaded only after you have actively chosen to display the relevant embedded content. Once activated, Google may process your data under its own privacy and cookie information. Where technically possible, we may use YouTube privacy-enhanced mode.

Provider Purpose When data may be transmitted
YouTube / Google Displaying embedded course-related videos or study materials. When the embedded video or player is loaded or activated.

More information is available in Google's privacy and cookie information: https://policies.google.com/privacy

External links to TikTok, Instagram and Telegram

Our website may contain ordinary links to our TikTok and Instagram profiles and to our Telegram support profile. These links do not by themselves set cookies or similar technologies on our website. If you click such a link, you leave our website and the relevant third-party service may process your data under its own privacy and cookie information.

TikTok, Instagram and Telegram are not treated as cookie providers for this website unless we embed their widgets, login tools, discussion tools, media players, posts, or similar technologies directly on the website. If we add such technologies, we will update this Cookie Policy and, where required, request consent before they are loaded.

Our website is hosted using Amazon Web Services in Europe. For customers with AWS accounts located in the European Economic Area, AWS services are generally provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.

AWS does not set cookies through our website for the purposes described in this Cookie Policy. However, as our hosting provider, AWS may process technical data necessary to deliver the website, maintain availability, protect the security of the service, and operate the hosting infrastructure.

Further information about hosting-related processing is provided in our Privacy Notice.

Our services may be used by minors as part of language learning. Where consent is required for non-essential cookies or similar technologies and we know that the user is below the applicable age of digital consent, consent must be given or authorised by a parent or guardian.

If you are under the age required by applicable law to give valid consent yourself, please ask a parent or guardian to manage cookie choices for you.

Some third-party providers used on our website may process personal data outside the European Economic Area, including in the United States.

Google Analytics data may be processed by Google LLC in the United States. Google relies on applicable data transfer mechanisms for such transfers, including Google LLC's certification under the EU-US Data Privacy Framework and, where required, Standard Contractual Clauses approved by the European Commission. More information is available in Google's privacy and data-transfer information: https://policies.google.com/privacy

Cloudflare may process personal data in the United States and other countries in connection with Cloudflare Turnstile. For transfers from the EEA to the United States, Cloudflare relies on applicable data transfer mechanisms described in its privacy notice, including the EU-US Data Privacy Framework and, where required, Standard Contractual Clauses. More information is available in Cloudflare's Privacy Policy: https://www.cloudflare.com/privacypolicy

Where other international transfers take place, they are subject to appropriate safeguards, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission, or other safeguards required by GDPR.

Further details are provided in our Privacy Notice and in the privacy information of the relevant third-party providers.

We may update this Cookie Policy from time to time, for example if we change the cookies, storage technologies, analytics tools, security tools, hosting provider, or third-party providers used on our website.

The latest version will always be available on this page.