The short version
Two kinds of cookie. The ones that keep you signed in, and the one that remembers your choice of language, are set whatever you choose — under § 25 Abs. 2 Nr. 2 TDDDG, cookies strictly necessary to provide a service you asked for need no consent. The only other kind is analytics — Google Analytics and Microsoft Clarity — and those are set only if you say yes, and never before you do. That is what the banner asks about, and you can change your answer on this page at any time. We set no advertising or retargeting cookies at all.
Strictly necessary cookies
These are set by our authentication provider, Supabase, when you sign in. Without them you would be signed out on every page you open.
sb-<project>-auth-token- Holds your signed-in session — the access and refresh tokens that identify you to our own servers. First-party, set on trustedlingo.com. Where the token is too large for a single cookie it is split across numbered cookies with the same name plus
.0,.1and so on. Lifetime: up to 400 days, refreshed as you browse; removed when you sign out. sb-<project>-auth-token-code-verifier- Short-lived. Set only while you are completing a sign-in that leaves our site and comes back — signing in with Google, or opening a magic link or a password-reset link. It secures that round trip against interception and is deleted as soon as the sign-in completes.
<project> is an identifier for our Supabase project, so the literal cookie name you see in your browser will contain a short string of letters in that position.
One more strictly necessary cookie is set by this website itself rather than by Supabase:
NEXT_LOCALE- Remembers the language you chose for this website, so that it opens in that language on your next visit. First-party, set on trustedlingo.com; it holds only the language code (for example
deoren). Set only while the website is offered in more than one language, and only when you pick a language or open the site in a language other than the one your browser prefers. Lifetime: one year.
Analytics cookies
We use Google Analytics 4 to see which pages help people and which do not — how many visitors a page gets, which search brought them, where they gave up. We also use it, only if you accept, to see whether an order followed a click on one of our Google Ads: when an order is paid, Google Analytics records the order code and the amount — not your name, your email address or your documents — and passes that one event to our Google Ads account. That measures our own advertising. Nothing about you is used to show you ads.
It runs in Google’s consent mode, set to deny storage before the Google script is allowed to load. Until you press Accept, no analytics cookie is written and no identifier for you exists. If you press Decline, none ever is.
_ga- Distinguishes one browser from another so repeat visits are not counted as new people. Set by Google, expires two years after your last visit. Only set if you accept.
_ga_<property>- Keeps the state of the current session — whether this page view belongs to the visit that started ten minutes ago. Set by Google, expires two years after your last visit. Only set if you accept.
Google LLC is in the United States, so accepting means data about your visit is transferred there. Our Privacy Policy sets out what that transfer rests on and what Google receives.
We also use Microsoft Clarity, which shows us how pages are used — where people scroll, what they click, where a page confuses them — as heatmaps and as replays of individual visits. Like Google Analytics, it only runs if you accept: until you do, the Clarity script is not even downloaded, so nothing is recorded and no cookie is set. It never records your order, uploads, messages, invoices, account settings or sign-in pages — it stops before any of those open — and text you type into forms is masked before it leaves your browser.
_clck- Recognises a returning browser so its visits can be grouped. Set by Microsoft on trustedlingo.com, expires after one year. Only set if you accept.
_clsk- Ties the pages of one visit together into a single recording. Set by Microsoft on trustedlingo.com, expires after one day. Only set if you accept.
CLID,MUID,ANONCHK,MR,SM- Set by Microsoft on its own domains (clarity.ms, bing.com) when the Clarity script loads, to identify the browser across Clarity-enabled sites and route the data. Lifetimes from one session up to one year. Only set if you accept.
Microsoft Corporation is in the United States, so accepting means data about your visit is transferred there too. Our Privacy Policy covers that transfer as well.
We set no advertising or retargeting cookies, and we do not build a profile of you or follow you across other websites. The Google Ads measurement above uses no advertising cookie either: Google’s ad storage stays denied whatever you choose.
Your current choice
This is live — it reflects what is set in this browser right now, and changing it takes effect immediately, with no reload.
Other information stored in your browser
Two features remember things locally without using a cookie. We list them here because, for your purposes, they are the same kind of thing — data kept on your own device.
tl-order-contactandtl-order-draft- Session storage. While you are filling in an order, these keep your contact details and your selections so that a page reload — or a detour through a sign-in screen — does not make you start over. They never leave your browser, are readable only by this site in that one tab, and are discarded when you close the tab or once the order is placed.
lexicon:checkout-success-seen:…- Local storage. Records that you have already seen the “payment received” confirmation for a given order, so it is not shown again every time you revisit that order. Contains no personal data beyond the order reference.
Managing cookies
You can delete or block cookies at any time in your browser settings, usually under Privacy or Cookies and site data. Most browsers also let you clear everything for a single site — in Chrome, Firefox, Safari and Edge, click the padlock or site icon in the address bar and look for the site data or cookie option there.
Blocking or deleting the strictly necessary cookies that keep you signed in will sign you out and will prevent you from signing in again until you allow them. Blocking the analytics cookies, which are only set with your consent, has no effect on how the site works. Everything else on the site — reading guides, pricing, getting a quote — works with cookies blocked entirely.
If you allowed analytics and want to take that back, use the control under “Your current choice” above — one press, effective immediately, no reason needed. Withdrawing is as easy as giving consent was, which is what Art. 7(3) GDPR requires. It does not affect anything collected before you withdrew; to have that deleted too, email us. If you have a question about anything on this page, email contact@trustedlingo.com.
How this relates to our Privacy Policy
This page covers what is stored on your device. What we do with your personal data once it reaches us — what we collect, on what legal basis, who processes it and how long we keep it — is set out in our Privacy Policy.