Last updated: November 5, 2026
This policy explains technologies stored or read on your device when you use the Hola25 website and app: cookies, localStorage, sessionStorage, browser databases, and mobile-app identifiers. We do not describe technologies strictly necessary for a requested service as consent-based; analytics and marketing technologies are disabled by default and activate only after your choice. The strictly necessary category remains active because it supports the requested service and its security.
These support authentication, security, payments, preferences, and functions you request. Blocking them at browser level may stop authentication or other core functions.
| Name or family | Type | Purpose | Duration |
|---|---|---|---|
| Firebase Auth / Firebase App Check | IndexedDB/browser storage and Firebase Auth-managed mobile AsyncStorage | Authentication, session persistence, security, and abuse prevention | Session or until sign-out/expiry; provider-defined storage may use its own duration |
| FCCDCF, FCNEC | Cookies on the hola25.com domain, set by the Google consent message | Your choice from the consent message (the IAB TCF string) and the message state; without them the message would show on every visit | Up to 13 months or until cleared or a new choice is made |
| hola25_language, hola25_currency | localStorage with TTL (web) / AsyncStorage (mobile app) | Selected language and currency | Web: 1 year; mobile: until the choice changes or app data is cleared |
| hola25_last_announcement_id | localStorage | The last announcement read | 1 year |
| hola25_teacher_search_recent | localStorage | Locally keeps up to five destination identifiers for recent teacher searches; it does not keep the entered search text | Until browser storage is cleared |
| hola25_admin_search_recent | localStorage | Locally keeps up to five destination identifiers for recent admin searches; it does not keep the entered search text | Until browser storage is cleared |
| hola25_onboarding_seen, hola25_last_announcement_id (mobile) | Mobile-app AsyncStorage | Guide completion and the last announcement read on the device | Until overwritten or app data is cleared; the app applies no TTL |
| hola25_anon_id | localStorage / mobile-app AsyncStorage | Security and anti-abuse limits for contact and media access; presence and viewer-cap enforcement for public webinars without an account | Until browser or app data is cleared |
| awardNudgeDismissed_* | localStorage (web) / AsyncStorage (mobile app) | Remembers the dismissed review notice for the exact lesson | Until sign-out, account change/deletion, or browser/app-data clearing |
| hola25_sf_seen_* | localStorage | Remembers progress notices already seen | Until sign-out, account change/deletion, or browser-data clearing |
| hola25_living_hidden_uids | Mobile-app AsyncStorage | Locally remembers users hidden in the live room | Until sign-out, account change/deletion, or app-data clearing |
| persist:root, cachedUserProfile (old web/mobile copies) | Web localStorage / mobile AsyncStorage; deletion migration only | Removes profile caches created by earlier releases; the current release no longer writes them | The app requests deletion at startup and on every sign-in, sign-out, account change, or account deletion; if storage denies removal, it retries at the next transition |
| panini_contest_announcement_v1 | localStorage | Remembers banners you chose to dismiss | Until browser data is cleared |
| hola25_session_id | sessionStorage | Correlates pseudonymous technical events within one visit | Browser session |
| hola25_waitlist_popup_dismissed / impressions / attribution | sessionStorage | Popup consistency, dismissal, and attribution within one visit | Browser session |
| hola25.lessonRoom.layout.v1 | localStorage | Selected lesson-room layout | Until browser data is cleared |
| hola25_trialNudge_* | localStorage | Remembers trial-lesson notices already dismissed or seen | Until sign-out, account change/deletion, or browser-data clearing |
We use Google Analytics as the "Analytics Service". Its script does not load until the Google consent message confirms your consent to store analytics data (IAB TCF purpose 1) or determines that European regulations do not apply to your visit. Google Consent Mode starts with analytics and advertising values set to "denied". After opt-in, the Analytics Service may process pseudonymous identifiers, request metadata including the IP address, and usage reports. We do not describe these data as anonymous.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Pseudonymous identifier used to measure usage | Up to 2 years |
| _ga_<ID> | Google Analytics | Maintains session state for the Analytics property | Up to 2 years |
The website loads the Google AdSense tag, which shows the Google consent message (a Google-certified consent management platform integrated with the IAB TCF) and stores your choice in the FCCDCF and FCNEC cookies. On blog articles, on the BAC, admission and teacher exam paper archives and on the school calendar we may show Google AdSense ads. Ads follow only the choices made in the consent message: without consent no advertising cookies are used. We do not show ads to signed-in users we know to be minors, to child accounts, or on the National Evaluation and olympiad archives. We do not load Facebook Pixel, TikTok Pixel, or a remarketing script.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| __gads, __gpi, __eoi | Google AdSense (on the hola25.com domain) | Serving and measuring ads, frequency capping, the personalised-ads identifier and the personalisation choice signal; personalisation only after consent in the consent message | Up to 13 months (__eoi: up to 6 months) |
| IDE, test_cookie | Google (doubleclick.net) | Ad measurement and personalisation only with consent; test_cookie only checks whether the browser accepts cookies | IDE: up to 13 months; test_cookie: 15 minutes |
The functional preferences and local identifiers listed above use web localStorage or mobile AsyncStorage, with the durations shown in the table; the mobile app applies no implicit TTL. Hola25 no longer writes public or private profile documents to its own cache. The profile is loaded from Firebase for the signed-in account, and the app requests removal of profile caches left by older releases and account-scoped local identifiers at startup and on authentication transitions. Firebase Auth session persistence remains separately managed by the SDK.
Mobile advertising is disabled in the current release. The iPhone app does not include Google Mobile Ads, UMP, or the ATT permission and does not read the advertising identifier; it therefore makes no ad request through those components.
When YouTube playback is activated in the lesson room, Google may receive the IP address, device and browser data, the referring page, and player interactions, and may use cookies or local storage under the service configuration and your choices. The youtube-nocookie.com domain reduces storage before playback but does not mean that the provider receives no data when the function is loaded or used.
If you open a provider's external page, it may use its own technologies under its policy. Hola25 does not inventory here cookies set exclusively on that provider's domain.
On your first visit from the European Economic Area, the United Kingdom or Switzerland, the Google consent message asks for your choice: you can consent, refuse, or manage options by purpose and partner. Afterwards, use the "Cookie settings" link in the website footer to reopen the message and change your choices at any time. Withdrawal stops future loading and we attempt to remove known Google cookies on our domain; you can also clear storage in browser settings.
Rejecting optional categories does not block your account, listings, lessons, or Premium subscription. Blocking all browser storage may prevent authentication and security features.
For a material change, we increase the policy version, and the Google consent message asks again for your choice when its purposes or partners change. For questions, email contact@hola25.com.