What cookies are
Cookies are small text files a website places on your device when you visit. They are sent back to the site on subsequent requests so it can remember things like whether you are signed in or which theme you have chosen. localStorage works the same way but stays on your device and is never sent to our servers.
We use both mechanisms — only to the minimum degree required to run the service. We do not use cookies for advertising, behavioural profiling, or cross-site tracking.
Cookies we use
Essential — sign-in and security
These cookies are required for the site to function. They are set only after you sign in and cannot be turned off without signing out.
authjs.session-token/__Secure-authjs.session-token— keeps you authenticated between page loads. HttpOnly, Secure, SameSite=Lax, first-party. Expires when you sign out or the session expires (30 days idle).authjs.csrf-token— protects sign-in and sign-out forms against cross-site request forgery. Short-lived, first-party.authjs.callback-url— remembers which page you were trying to reach before being redirected to the sign-in flow. Cleared after use.
Preferences — stored in localStorage
These are kept in localStorage, not in cookies, so they are never transmitted to our servers. They persist between visits on the same device and browser.
grammar-theme— your chosen colour scheme: light, dark, or system. Persists until you change it or clear browser storage.grammar-lang— the language of the interface (English or Russian). Also stored as a cookie of the same name so the server can render the correct locale on first load.
Analytics and advertising
English Courses does not run third-party analytics scripts and does not place advertising cookies of any kind. We collect no data for the purpose of targeting advertisements.
If lightweight, privacy-respecting analytics are added in the future (no cross-site tracking, no fingerprinting, no data sale), they will be listed in this policy and the date at the top of the page will be updated before the change takes effect.
Third-party cookies
Sign-in is handled by Google OAuth and Apple Sign-In. During the redirect, Google and Apple may set cookies on their own domains (accounts.google.com, appleid.apple.com) as part of their authentication flow. These are outside our control and subject to their own privacy policies. We do not receive or store those cookies — only the resulting session token that confirms authentication was successful.
We do not embed Google Analytics, Facebook Pixel, or any similar tracking script on this site.
How to control cookies
You can clear cookies and localStorage for english-grammar.ru at any time through your browser settings. The exact steps vary by browser:
- Chrome: Settings → Privacy and security → Delete browsing data → Cookies and other site data.
- Safari: Settings → Advanced → Website Data → search for english-grammar.ru → Remove.
- Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data.
Clearing the session token will sign you out. Clearing grammar-theme or grammar-lang resets those preferences to the defaults (system theme, English interface).
You can also use browser extensions or built-in privacy modes to block cookies site-wide. The only impact on English Courses is that you will not be able to stay signed in.
Changes to this policy
If we add, remove, or change how we use cookies, we will update this page and revise the “Last updated” date at the top before the change takes effect.
Contact
Questions about cookies or browser storage? Write to hello@english-grammar.ru.