Notice on Cookies and Storage
Last updated: 27.10.2026
1. In short
- On your device we only store what KollegPass technically needs.
- Statistics with Cloudflare Web Analytics run only with your consent. No cookies are set for this.
- We use no advertising cookies and no tracking across other websites.
- You can change your choice at any time under "Privacy settings" at the bottom of every page.
2. The rules
As a rule, we may store information on your device or read it from there only with your consent (§ 25(1) TDDDG, the German Telecommunications Digital Services Data Protection Act). Consent is not needed if storing or reading is strictly necessary for us to provide a service that you have explicitly requested (§ 25(2) no. 2 TDDDG). Similar rules apply in other EU countries (Art. 5(3) of the ePrivacy Directive).
If personal data is processed in the process, the GDPR also applies. More in the Privacy Policy.
3. Necessary storage (no consent needed)
| What | Type | Purpose | How long |
|---|---|---|---|
| Learning progress and settings | local storage | store guest progress, language, theme and local learning data | until you delete it or reset it in the app |
| Sign-in session | local storage | keep you signed in (Supabase) | until you sign out or the session expires |
| Privacy settings | local storage | store your choice on statistics and push | |
| Invitation code | local storage | remember the code from an invitation link until you sign up, so the bonus works | until sign-up, at most |
| App files, exercises and audio | service worker and Cache Storage | load the app fast and make it usable offline | until the next update or until you delete them |
| Cloudflare security cookies | cookie | block bots and attacks |
When you pay, the Dodo Payments checkout opens. Dodo Payments may set its own cookies there. The Dodo Payments notices apply to these.
4. Storage only with consent
Statistics (Cloudflare Web Analytics)
A Cloudflare script reads performance data from your browser, for example loading times. We only see aggregated numbers: how often pages are viewed, from which countries and how fast they load. The script sets no cookies and does not track you across other websites. It runs only after you agree. By default it is off.
Push notifications
If you turn on push reminders, your browser stores a push subscription. This only happens if you activate it in KollegPass and give your browser permission (see section 5).
Marketing
We currently use no marketing or advertising technologies. If we change this later, we will ask for your permission separately beforehand.
5. Web push
For push notifications, your browser creates a technical address at the push service of your browser maker (for example Google, Mozilla, Apple or Microsoft). We store this address to send you reminders. You can turn push off at any time in the KollegPass settings or in your browser.
6. Offline use with the service worker
KollegPass is a web app (PWA). A service worker stores app files and learning content on your device. This makes the app load faster and partly work without internet. The service worker is not used for tracking. You can delete the stored data in your browser settings or uninstall the app.
7. Signing in with Google, Apple or Telegram
We load the sign-in function of Google, Apple or Telegram only when you click the respective button. The provider may set cookies on its own pages. Its privacy notices apply to these. This is strictly necessary for the sign-in that you have explicitly chosen.
8. Fonts and other content
We deliver fonts and other files from our own servers. We load third-party content only when you actively open it.
9. Changing your settings
- Under "Privacy settings" at the bottom of every page you can give or withdraw your consent at any time. Withdrawal applies for the future.
- You can delete stored data in your browser at any time. Note: as a guest you lose your learning progress when you do this.
10. Changes
If we use new technologies, we will update this notice. For anything that requires consent, we ask you first.