1. What cookies are
Cookies are small files a website stores in your browser. We also use your browser’s local storage (localStorage and sessionStorage), which works in a similar way but is not sent to the server. We treat both the same on this page.
2. How we ask for your consent
On your first visit we show a notice with three options: Solo necesarias (necessary only), Configurar (settings) and Aceptar todo (accept all). No optional category is pre-selected and no Google script is loaded until you decide. You can change your choice at any time via “Cookies” in the footer; if you withdraw a permission, the page reloads to switch it off.
We only use necessary cookies, and show no notice, in the app, for school accounts, for teachers with a school licence and their students and for users under 16.
3. Necessary cookies
Essential for the website to work (login, language). No consent required (§ 25(2) TDDDG).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
wordpress_logged_in_* | H Spanish Academy | Keeps you logged in. | Session; 14 days with “Remember me” |
wordpress_sec_* | H Spanish Academy | Protects your session (secure authentication). | Session; 14 days with “Remember me” |
wordpress_test_cookie | H Spanish Academy | Checks that your browser accepts cookies when logging in. | Session |
hsc_language | H Spanish Academy | Remembers the interface language. | 30 days |
hsc_device | H Spanish Academy | Premium accounts only: random identifier that recognises this browser, so we can email you if someone signs in to your account from a new one. | 1 year |
Payment: only on the payment page, the payment providers use their own cookies to process the payment securely and prevent fraud. They are necessary for the service you request and need no consent (§ 25(2) TDDDG). Details in the privacy policy.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
__stripe_mid | Stripe | Fraud prevention for card payments. | 1 year |
__stripe_sid | Stripe | Fraud prevention during the payment session. | 30 minutes |
m (m.stripe.com) | Stripe | Recognises the device to detect fraudulent payments. | 2 years |
Cookies de PayPal | PayPal | Login and security when paying with PayPal. | Set by PayPal |
4. Browser local storage
Data kept on your device to remember your preferences. It is not sent to anyone and requires no consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
hsc_cookie_consent | localStorage | Stores your cookie choice. | 6 months |
hsc_bookmarks | localStorage | Activities you have saved. | Until you delete it |
hsc_view_mode | localStorage | View mode chosen in activities. | Until you delete it |
hsc_pending_streak, hsc_show_streak_on_load | sessionStorage | Shows your study streak celebration. | Session |
tema_color, tema_transitioning | sessionStorage | Colour transition between pages. | Session |
5. Statistics (optional)
Only with your consent. Google Analytics tells us which pages and activities are used so we can improve the website. Provider: Google Ireland Limited. Details in the privacy policy.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Distinguishes visitors for statistics. | 2 years | |
_ga_* | Stores the session state for statistics. | 2 years |
6. Advertising (optional)
Only with your consent. Google AdSense shows ads that keep the content free. In the European Economic Area no ads personalised to your interests are shown. Premium users see no ads. Provider: Google Ireland Limited. Details in the privacy policy.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
__gads, __gpi | Show ads, limit repetition and measure performance. | 13 months | |
__eoi | Ad security and fraud prevention. | 6 months | |
IDE (doubleclick.net) | Measures and, outside the EEA, personalises ads. | 13 months |
7. How to delete or block cookies
Besides “Cookies” in the footer, you can delete or block cookies and site data in your browser settings (usually under Privacy or Security). If you block necessary cookies, you won’t be able to log in.
8. More information
How we handle your data and your rights: privacy policy. Questions: contact form.