Cookie policy

This cookie policy explains how Rekku uses cookies and similar technologies on rekku.net (the "website") and in the Rekku apps, including the web app at app.rekku.net. It complements our privacy policy.

The short version: the website only sets analytics cookies if you say yes, the web app only if you turn on usage statistics, the other cookies are only there to keep you signed in, and Rekku never uses cookies for advertising. You can change your choice at any time under Cookie settings at the bottom of every page.

1. What are cookies?

Cookies are small text files a website saves in your browser. Similar technologies, such as local storage in your browser or storage inside an app, work in much the same way. We call all of them "cookies" in this policy.

Under the EU ePrivacy rules and the Finnish Act on Electronic Communications Services, a website may only store or read cookies on your device with your consent, unless they're strictly necessary to provide a service you've asked for.

2. Cookies on the website

When you first visit rekku.net, we ask whether you accept analytics cookies. Until you accept, the website doesn't load any analytics code and sets no cookies for visitors except Cloudflare's security cookies (the web app's sign-in hint and the staff cookies below are only there if you use them). We don't use advertising or social media pixels. Our fonts and images are served from our own servers, and we don't embed content such as videos or maps that would let other companies set cookies. Apart from Google Analytics, if you accept it, the only thing from another company on our pages is the bot check on the waitlist form (see Security).

The website is in English and Finnish. The language is part of the address (for example rekku.net/fi), so no cookie is needed to remember it. When you open rekku.net without a language, we pick one from the language settings your browser sends.

Our servers still receive the technical data every website needs to work, such as your IP address. The privacy policy explains how we handle it.

Security

rekku.net and app.rekku.net are served through Cloudflare, which protects them from attacks and abusive traffic. To do that, Cloudflare may set:

__cf_bm: tells people apart from automated bots. Expires after 30 minutes.
cf_clearance: remembers that your browser passed a security check, so you aren't checked again. Expires after up to a year.

They're strictly necessary to keep the website secure, so they don't need consent, and they aren't used to track you.

The waitlist form also uses Cloudflare Turnstile to check that the person joining isn't a bot, before any email is sent. It runs in a small frame from challenges.cloudflare.com, only on the waitlist page, and sets no cookies on rekku.net. Cloudflare may keep a short-lived token in that frame for the check. It's strictly necessary to protect the form from abuse, so it doesn't need consent, and it isn't used to track you.

Your cookie choice

We save your answer in your browser's local storage (as rekku-cookie-consent) so we don't ask on every page. This is strictly necessary to respect your choice, so it doesn't need consent. We ask again after 13 months.

Analytics cookies (only with your consent)

If you accept, we use Google Analytics, provided by Google Ireland Limited, to count visits and see how people use the website, so we can improve it: which pages and sections they see, what they click (such as Get started or the language switch), how the demos on the front page are used, and how fast the pages load. We never send anything you type, such as your email address or your answers in the demos. Google processes the data on our behalf. We've turned off Google's advertising features and Google signals, so the data isn't used for ads or linked to your Google account.

_ga: tells visits from different browsers apart. Expires after 13 months.
_ga_PPQ7BZN0H7: keeps track of your current visit. Expires after 13 months.

You can withdraw your consent at any time under Cookie settings at the bottom of any page. We then stop collecting analytics data and delete these cookies from your browser. Legal basis: your consent (Art. 6(1)(a) GDPR).

If you're signed in to the Rekku web app

When you sign in to the web app at app.rekku.net, it also sets one cookie for rekku.net, so the website knows to take you straight to the app instead of showing you the front page:

rekku_signed_in: only says that you're signed in (its value is "1"). It holds nothing about you or your account, and the website doesn't use it for anything else. Expires 30 days after you last used the web app, or when you sign out.

It's strictly necessary for the signed-in service you asked for, so it doesn't need consent.

Staff sign-in

The content management area at /cms, which only our team can use, has two cookies of its own. They're strictly necessary, are never set for other visitors and aren't used for tracking:

cms_sign_in: keeps the sign-in secure while you sign in with Google. Deleted after sign-in, or after 10 minutes.
cms_session: keeps a team member signed in. Expires after 12 hours or on sign-out.

3. Storage in the Rekku apps

The Rekku apps (the web app at app.rekku.net and the mobile apps) store data on your device only where it's strictly necessary for features you use:

keeping you signed in,
remembering your settings, such as language and theme,
saving sets you download so you can study offline, and
keeping your study progress until it syncs.

The web app does this with these cookies on app.rekku.net, and with your browser's local storage for your settings:

rekku_session: keeps you signed in. Expires 30 days after you last used the web app, or when you sign out.
rekku_signed_in: tells the website that you're signed in (see section 2). Expires with rekku_session.
rekku_lang: carries the language you chose when signing up into the app. Deleted after 10 minutes.

These don't need your consent because Rekku can't provide those features without them. You can remove them by signing out, deleting downloaded sets, clearing your browser's data for app.rekku.net or uninstalling the app.

Usage statistics in the web app (only with your consent)

If you turn on usage statistics, when you create your account or later under Profile → Usage statistics, the web app uses Google Analytics, provided by Google Ireland Limited, to see how Rekku is used: which screens and features you use, how study sessions go, which errors happen and how fast the pages are. It never sends anything you write or upload, or your name, email address or account ID. These cookies are set on app.rekku.net only:

app__ga: a random ID that tells your browser's visits apart. Expires after 13 months.
app__ga_9FCNH42C8F: keeps track of the current visit. Expires after 13 months.

Google's advertising features and Google signals are off. Usage statistics are off unless you turn them on, and students under their country's age of digital consent aren't asked. Turning them off stops the collection and deletes these cookies from that browser. Legal basis: your consent (Art. 6(1)(a) GDPR).

The mobile apps don't use analytics cookies, and none of the apps use advertising cookies. If we ever want to use other storage in the apps that isn't strictly necessary, we'll ask for your consent first, let you say no as easily as yes, and update this policy.

4. Managing cookies

You can change your choice about analytics cookies at any time under Cookie settings at the bottom of every page. You can also see, block and delete cookies in your browser settings. Blocking cookies doesn't affect the public website, but you can't stay signed in to the web app without its cookies. The help pages for common browsers explain how:

5. Changes to this policy

We'll update this policy if the cookies we use change. The date at the top shows when it was last updated.

6. Contact

Questions about cookies? Email contact@rekku.net.