Legal
Cookie Policy
Last updated: June 2026
What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to the website operators. Similar technologies (such as tokens, localStorage, and session storage) may also be used for equivalent purposes.
Cookies We Use
Name
__session
Provider
Upslang / Firebase
Purpose
Maintains your authenticated session across upslang.com and cambridge.upslang.com. Enables secure cross-subdomain Single Sign-On.
Duration
1 day
Type
HttpOnly Cookie
Name
upslang_consent
Provider
Upslang
Purpose
Stores your cookie consent choice (accepted or declined) so you are not asked again on every visit. Set at Domain=.upslang.com so your preference applies across all Upslang subdomains. No personal data is encoded in this cookie — it contains only the values "granted" or "denied".
Duration
12 months
Type
Cookie (SameSite=Lax; Secure)
Name
_ga, _ga_*
Provider
Google Analytics 4
Purpose
Tracks pseudonymised usage patterns: pages visited, session duration, geographic region, device type, and interaction events (exam starts, completions, scores, navigation). Used to understand how users interact with Upslang and improve the platform. IP addresses are not stored by GA4.
Duration
Up to 2 years
Type
Cookie / localStorage
Name
_clck, _clsk
Provider
Microsoft Clarity
Purpose
Records anonymised session replays (video-like recordings of how you navigate the platform), heatmaps (click and scroll patterns), and behavioral analytics. Balanced masking is applied — text typed into input fields is automatically obscured in recordings. Sessions are linked to a pseudonymous identifier (not your name or email) for support and debugging purposes.
Duration
_clck: 1 year / _clsk: session
Type
Cookie / localStorage
Name
reCAPTCHA Enterprise tokens
Provider
Google LLC
Purpose
Protects the platform from automated abuse and bot attacks. Analyzes interaction patterns to distinguish humans from bots. Google may set its own cookies or use local storage as part of this service.
Duration
Session / per request
Type
Token (not a persistent cookie)
Managing Your Cookie Preferences
You can control and manage cookies in several ways:
Cookie Preferences (Upslang)
Use our Cookie Preferences panel to accept or withdraw consent for analytics cookies at any time. Withdrawing consent is as easy as granting it.
Browser Settings
Most browsers allow you to refuse or delete cookies through their settings. Note that disabling strictly necessary cookies may affect platform functionality (e.g., you may be unable to stay logged in). Refer to your browser's help section for instructions.
Google Analytics Opt-Out
You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.
Microsoft Clarity Opt-Out
You can opt out of Microsoft Clarity session recording by visiting clarity.microsoft.com/optout or by withdrawing analytics consent via our Cookie Preferences panel above.
Global Privacy Control (GPC)
If your browser or browser extension has Global Privacy Control enabled (navigator.globalPrivacyControl = true), Upslang automatically denies all analytics data collection without requiring any banner interaction. GPC is supported as required by the California Privacy Rights Act (CPRA).
International Transfers
Google LLC (Analytics, reCAPTCHA) and Microsoft Corporation (Clarity) are based in the United States. Data transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, providing adequate data protection safeguards. Google also participates in the EU-US Data Privacy Framework. Analytics data exported to BigQuery is stored exclusively in the EU region and does not leave the EEA.
Do Not Track (DNT)
Some browsers transmit a “Do Not Track” (DNT) signal indicating a preference not to be tracked. As there is no common industry standard for how websites should respond to DNT, Upslang does not currently alter its data collection practices based solely on a DNT signal. However, we fully support the Global Privacy Control (GPC) signal — if your browser or extension sends a GPC signal, analytics collection is automatically denied without requiring any further action from you. See the Managing Your Cookie Preferences section above.
Questions?
If you have any questions about our use of cookies, contact us at hello@upslang.com.