Cookie & Storage Policy
This policy explains everything Dextrata Software Inc. ("Dextrata", "we", "us") stores on your device when you use Road English (the "Service"). It supplements the Privacy Policy.
1. The short version
We use one cookie to keep you signed in, plus a short-lived one only while you sign in with Google. We run no advertising cookies, no analytics cookies, no tracking pixels, no social-media widgets, and no third-party trackers of any kind. We do not sell or share device data with anyone for advertising.
We do measure how the site is used, with our own cookieless analytics that stores nothing on your device (see Site analytics in the Privacy Policy). Because it stores nothing on your device and reads nothing that was stored there, it adds nothing to the list below.
This is why you are not shown a cookie consent banner. Under the EU ePrivacy Directive (Article 5(3)) and the UK Privacy and Electronic Communications Regulations, storage that is strictly necessary to provide a service the user has explicitly requested — such as an authentication cookie — is exempt from the consent requirement. Everything in the lists below falls within that exemption or is not a cookie at all.
2. What we store
Cookies
re_session— a session identifier. Set when you sign in; deleted when you sign out. Type: strictly necessary. Duration: 14 days. Flags: HttpOnly, Secure, SameSite. Purpose: authenticating your requests so we know you are enrolled. The cookie holds an opaque token, not your email, name, or password. If you block it, you cannot sign in.
One more cookie exists only if you choose to sign in with Google: re_google_state, a signed random value that protects the sign-in against forgery. If you arrived through a referral link, it also carries the referral code from that link. It is strictly necessary, HttpOnly, limited to the sign-in path, and deleted when Google returns you to us or after 10 minutes. We set no other cookies.
Local storage (stays on your device)
Local storage is not a cookie and is never transmitted to us. Your browser holds it; we only read it in your browser to render the page correctly.
- Language preference — the site language you selected, so you do not have to pick it again.
- Theme — whether you chose the light or dark theme.
- Lesson progress — which sections of which lessons you have completed, plus the review and streak data some lessons keep, stored under each lesson's own path. This stored record is not sent to our servers. Clearing your browser data erases it, and we cannot restore it. Separately, our servers do record which lessons your account opens, and our cookieless analytics records which lesson sections are reached — see the Privacy Policy.
- Your name for a progress code — if you create a progress code to give your manager, the name you enter is kept here so you do not have to retype it. It is not sent to us.
- Microphone answer — whether you agreed to let the pronunciation exercises use your browser's speech recognition, so you are not asked on every lesson. See the Privacy Policy.
Session storage (cleared when you close the tab)
- Virtual Teacher conversation — the messages in your current chat, so they survive a page reload. The storage itself is not sent to us, but each message you send, with the recent conversation, is sent through our server to OpenAI to produce a reply — see the Privacy Policy.
Service worker cache
Road English installs a service worker so it can be added to your home screen as an app. It is deliberately network-only: it caches no course content, no lesson audio, and no personal data. The only file it stores offline is a single "you are offline" page. Course material is downloaded live every time.
3. Third parties that may set storage
We embed no third-party trackers. However, some providers may set their own storage when you actively use their functionality, and some are contacted when certain pages load:
- Helcim — our payment processor. Helcim's checkout script is loaded on the signed-in course page, so your browser contacts Helcim (with your IP address and user agent) each time that page loads. When you open the checkout window, Helcim's payment form may also set storage necessary to process and secure the transaction. This is governed by Helcim's own privacy policy.
- Google — only if you choose to sign in with Google. Google sets its own cookies during that sign-in flow, governed by Google's privacy policy, and we set the short-lived
re_google_statecookie described above. If you sign in with email and password instead, Google sets nothing.
We do not control these providers' storage and are not responsible for their independent practices.
4. Your choices
- Block or delete cookies in your browser settings at any time. Blocking the session cookie prevents sign-in; nothing else on the site depends on cookies.
- Clear local storage in your browser settings. This erases your saved language and your lesson progress permanently.
- Do Not Track / Global Privacy Control — we do not track you across sites and do not sell or share personal information. If your browser sends either signal, our site analytics does not run at all.
- Uninstall the app from your home screen to remove the service worker.
5. Changes
If we ever introduce non-essential storage — analytics, for example — we will update this policy and, where the law requires it, ask for your consent before setting it. We may otherwise update this policy at any time by posting a revised version with a new "Last updated" date.
6. Contact
Dextrata Software Inc. — [email protected]