Flalingo

Cookie Policy

This document is also available in other languages; in the event of any conflict between a translation and this English version, this English version shall prevail.

As Global Education Technology, C-corp. ("hereinafter referred to as Flalingo"), we attach great importance to the privacy and data security of the visitors of our website https://flalingo.com/ ("Website").

This Cookie Policy ("Policy") has been prepared to explain to you which personal data we process, for what purposes, and your rights regarding this, through cookies and similar technologies placed on your device when you visit our Website, in accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK"), the European Union General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA/CPRA"), and other applicable global data protection laws.

We use cookies to ensure you get the most out of our website and to enhance your user experience. During your first visit to our site, you can allow the use of cookies other than strictly necessary cookies through the cookie management panel that appears, or you can change your preferences at any time later through this panel.

For more detailed information on the processing of your personal data, please review our Personal Data Protection and Privacy Policy.

1. What is a Cookie?

Cookies are small text files stored on your device or network server by websites you visit through browsers. Cookies allow your device to be recognized when you visit a website.

2. Types of Cookies

Cookies can be classified in terms of their sources and durations:

A. Cookies by Duration

  • Session Cookies: Session cookies are temporary cookies that are used during your visit to the Website and are deleted after the browser is closed. The main purpose of using such cookies is to ensure that the Website functions properly during your visit.
  • Persistent Cookies: Persistent cookies are a type of cookie used to enhance the functionality of the Website and provide our visitors with a faster and better service. These cookies are used to remember your preferences and are stored on your device through browsers. They are removed from your device when their validity periods expire or when you delete them.

B. Cookies by Source

  • First Party Cookies: Are placed on your device by the website you are visiting directly.
  • Third Party Cookies: These are cookies placed on your device by third parties, such as advertisers or analytics service providers, who are our partners and not by the Website itself.

3. Cookies and Legal Reasons According to Their Purposes

On our website, cookies are used for specific purposes in accordance with the personal data processing conditions specified in the KVKK. According to applicable data protection laws, including the KVKK and GDPR, we require the "Explicit Consent" of our valued visitors for the use of all cookies except for "strictly necessary cookies."

A. Strictly Necessary Cookies

  • Purpose: These cookies are technically necessary for the secure operation of the Website, for the fulfillment of its basic functions (such as filling out forms), and for the provision of services explicitly requested by you.
  • Legal Basis: Your personal data is processed through these cookies in accordance with Article 5(2)(c) and (f) of the KVKK, and if you are in the EEA/UK, in accordance with Article 6(1)(b) (performance of a contract) and Article 6(1)(f) (legitimate interests) of the GDPR.
  • Consent: Your explicit consent is not required for these cookies, but if you block these cookies, some essential functions of the site may not work.

B. Functional Cookies

  • Purpose: These cookies allow us to remember your preferences such as language and region on the Website and enable the site to be personalized for you.
  • Legal Basis: These cookies are used solely in accordance with your explicit consent provided under Article 5/1 of the KVKK and Article 6(1)(a) of the GDPR.

C. Performance / Analytical Cookies

  • Purpose: These cookies collect anonymous and statistical information about how the Website is used (e.g., which pages are visited most, how long users stay on the site, error messages) to help us measure and improve the site's performance.
  • Legal Basis: These cookies are used solely in accordance with your explicit consent provided under Article 5/1 of the KVKK and Article 6(1)(a) of the GDPR.

D. Marketing Cookies

  • Purpose: These cookies are used to display content and advertisements that are relevant to your interests based on your browsing activities on the internet (typically through third-party partners).
  • Legal Basis: These cookies are used solely in accordance with your explicit consent provided under Article 5/1 of the KVKK and Article 6(1)(a) of the GDPR. Under the CCPA, California residents have the right to opt-out of the sharing of their data for cross-context behavioral advertising through these cookies.

4. List of Cookies Used on Our Platform

On our website, various strictly necessary cookies may be used, as well as cookies from third-party service providers for performance analysis (e.g., Google Analytics) or marketing purposes (e.g., Insider One).

Cookie NameProviderCategoryPurpose of UseStorage Duration
laravel_sessionFlalingoStrictly NecessaryIt allows the user's session information to be stored, maintaining the login status.Browser Session
XSRF-TOKENFlalingoStrictly NecessaryIt performs security verification during form submissions to ensure the safe use of the website.Browser Session
USER_API_TOKENFlalingoStrictly NecessaryEnsures the user has a seamless session experience across the platform.30 Days
USERFlalingoStrictly NecessaryIt allows the user to be recognized across the platform and maintains their session.100 Days
lesson_access_tokenFlalingoStrictly NecessaryStores authentication information securely to provide access to the lesson session.120 Minutes
zak_tokenFlalingoStrictly NecessaryStores the authorization information necessary to start the live class session.120 Minutes
ADMIN_API_TOKENFlalingoStrictly NecessaryStores authentication information securely for the platform management interface.1 Month
FORCE_LANGFlalingoFunctionalEnsures that the site is displayed in the selected language by applying the user's preferred interface language.Browser Session
user_countryFlalingoFunctionalIt detects the user's location to automatically adjust language and content preferences.365 Days
chosenLangFlalingoFunctionalRemembers the user's preferred interface language.45 Days
announceFlalingoFunctionalPrevents the re-display of announcements that the user has closed.1 Day
hide_nps_popupFlalingoFunctionalDetermines whether the satisfaction survey will be shown to the user again.1 Day
random_tutor_idsFlalingoFunctionalEnsures that the list of instructors shown to the user remains consistent.1 Day
fla_visitor_idFlalingoFunctionalIt creates an anonymous visitor ID to improve the site experience; it is not associated with personal information.90 Days
fla_ab_testIdFlalingoFunctionalIt ensures a consistent appearance for the user in efforts to improve the site experience.90 Days
referralParamsFlalingoMarketingStores visit source information to determine which marketing channel the user accessed the site from.Browser Session
referralFlalingoMarketingStores the marketing source that directs the user to the site; used for source identification during registration and purchasing processes.365 Days
link_promoFlalingoMarketingStores it so that the promotional code can be applied during the purchase process.24 Hours
link_refFlalingoMarketingStores the referral code until the purchase process is completed.Deleted After Payment
new_ref_linkFlalingoMarketingIt is used to identify the source of purchase by storing referral information.30 Days
gclidFlalingoMarketingStores click information to measure the effectiveness of Google Ads advertising campaigns.90 Days

5. Transfer of Data Abroad

The servers of third-party service providers used on our platform may be located abroad. By selecting the "Accept" option, you will be deemed to have given your explicit consent for your IP address, device information, and in-platform activities to be transferred to the secure servers of the service providers located abroad. For users accessing our platform from the European Economic Area (EEA) or the UK, we ensure that appropriate safeguards are in place for international data transfers, such as the Standard Contractual Clauses (SCCs) approved by the European Commission, or we rely on your explicit consent where applicable.

6. Management of Your Cookie Preferences

When you first visit our website, you will be presented with a "Cookie Management Panel" (cookie banner). Through this panel, you can use the "Accept" or "Reject" options for cookie categories other than "Strictly Necessary Cookies." You have the right to change your preferences at any time through the Cookie Settings link or to withdraw your consent. Additionally, you can delete or block cookies at any time through your browser settings. However, if you block Strictly Necessary Cookies, the platform's core functions, such as logging in or watching lesson videos, may not work.

7. Your Rights as a Data Subject

In accordance with Article 11 of the KVKK, Chapter 3 of the GDPR, and the CCPA, you can exercise your rights regarding the following by applying to us as the Data Controller:

  • Learning whether your personal data is being processed,
  • Requesting information regarding this if processed,
  • Learning the purpose of processing and whether it is used in accordance with that purpose,
  • Knowing the third parties to whom it is transferred, whether domestically or abroad,
  • Requesting correction if processed incorrectly or inaccurately,
  • Requesting its deletion or destruction within the framework of the conditions stipulated in Article 7 of the KVKK,
  • Requesting notification to third parties to whom personal data has been transferred, in accordance with articles (d) and (e),
  • Objecting to the emergence of a result against you through the analysis of processed data solely by automated systems,
  • Requesting compensation for damages incurred due to the unlawful processing of personal data,
  • Requesting the restriction of processing of your personal data (GDPR),
  • Exercising your right to data portability by requesting a copy of your data in a structured, machine-readable format (GDPR),
  • Exercising your "Right to be Forgotten" by requesting the erasure of your personal data when it is no longer necessary (GDPR),
  • Opting out of the "sale" or "sharing" of your personal information for targeted advertising purposes (CCPA),
  • The right to non-discrimination for exercising your privacy rights (CCPA).

To exercise these rights, you can submit a written application in accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller by sending an email to our email address info@flalingo.com.