Cookie Policy
v2.1Last updated: July 31, 2026 · Effective: July 31, 2026
2. How We Use Cookies
Voxlio uses cookies exclusively for essential functionality. We do not use cookies for analytics, advertising, tracking, or profiling. Our cookie philosophy is minimal: if it doesn't need a cookie, we don't set one.
Authentication
NextAuth.js session cookie keeps you logged in across pages. Required for all platform features including Speaking, Writing, Dashboard, and V-Coin system.
Security
CSRF tokens prevent cross-site request forgery attacks on authentication and form endpoints. Rate limiting protects against brute-force attempts.
Preferences
Your selected currency (UZS/USD) is stored in a cookie so the setting persists between visits. Optional — can be disabled via Cookie Preferences.
The AI Vocabulary feature sends the word you type to Groq Inc. for analysis. No cookies are set by this feature — the request is stateless.
4. Cookie Consent
When you first visit Voxlio, a consent banner appears at the bottom of the screen. It records your preference regarding optional localStorage items. You may:
- OK — records consent for both essential cookies and optional preference localStorage items
- Dismiss — dismisses the banner and records that only essential cookies are permitted
- Preferences — opens a modal where you can toggle the preference category on or off and save your choice
Your choice is stored in a localStorage key called voxlio-cookie-consent and persists across sessions. You can change your preference at any time by clicking Cookie Preferences in the footer.
5. LocalStorage vs Cookies
In addition to cookies, Voxlio uses the browser's localStorage API to store certain user preferences and data on your device. Unlike cookies, localStorage data is never sent to the server with HTTP requests and cannot be accessed across different websites.
| Key | Content | Duration |
|---|---|---|
| voxlio-theme | Dark/light mode preference | Until changed |
| voxlio_part2_notes | Quick notes taken during Part 2 preparation | Until cleared |
| voxlio-timer-sessions | Study Timer session history (up to 100 entries) | Until cleared |
| voxlio-timer-volume-global | Timer alarm volume setting | Until changed |
| voxlio-float-timer-pos | Floating timer widget screen position | Until changed |
| voxlio_recent_vocab | Recent AI vocabulary searches (last 10) | Until cleared |
| voxlio-custom-presets | Custom Study Timer presets (up to 10) | Until deleted |
| voxlio-cookie-consent | Your cookie consent preferences (JSON) | Until changed |
| voxlio-vcoin-intro-seen | Tracks whether V-Coin intro popup has been shown | Until cleared |
| voxlio-whats-new-version | Last seen What's New popup version (suppresses re-show) | Until updated |
| premium_order | Current premium payment order state (temporary) | Until completed |
You can clear localStorage at any time via your browser's Developer Tools (Application → Local Storage) or by clearing site data in browser settings. Clearing localStorage will not log you out — authentication is cookie-based.
6. Third-Party Cookies
When you use the optional Premium payment feature, you are redirected to Click (Click.uz) — a licensed payment processor in Uzbekistan. Click may set its own cookies on their payment pages for transaction processing, fraud prevention, and session management. We do not control these cookies.
No other third party sets cookies through Voxlio. We do not embed social media widgets, analytics scripts, advertising pixels, or fingerprinting scripts. Our page source is fully auditable.
7. Managing Cookies
You can control and manage cookies through your browser settings. Below are links to instructions for common browsers:
8. GDPR & CCPA Compliance
Voxlio is committed to compliance with data protection regulations including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Uzbekistan Law on Personal Data.
GDPR (EU Users)
- Data processed on lawful basis of legitimate interest & contract performance
- No consent required for essential cookies
- Right to access, rectify, erase, and port your data
- Data stored in US/EU with standard contractual clauses
CCPA (California Users)
- Right to know what personal information is collected
- Right to request deletion of personal information
- Right to opt out of sale of personal information
- We do not sell personal information — ever
9. Policy Updates
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via email or platform notification. We encourage you to review this policy periodically.
This policy was last materially revised on July 31, 2026 to reflect Voxlio v2.1: full IELTS Reading practice (Cambridge Books 10–20) with automatic marking, and expanded Writing Library. Cookie usage is unchanged — only essential cookies and optional preference storage items.