Cookie Policy

Cookies are small text files that a website places on your device when you visit. They let the site recognise your browser, keep you signed in, remember your preferences, and understand how the site is used. Cookies set by the site you are visiting are called "first-party" cookies; cookies set by another domain (for example an embedded video player) are called "third-party" cookies.

We also use technologies that are similar to cookies but technically different, such as your browser's localStorage. Like cookies, these store small pieces of information on your device, but unlike cookies they are not automatically sent to our servers with every request. Where this policy refers to "cookies", we mean cookies and these similar technologies together, unless stated otherwise.

Our mobile apps do not use browser cookies at all. Instead they use the device's secure storage and preferences, which we describe in the mobile apps section below.

We keep our use of cookies deliberately minimal. We use them for the following purposes:

• Strictly necessary: to keep you securely signed in and to protect sign-in flows against cross-site request forgery (CSRF). These cookies are essential — the Service cannot work properly without them.
• Functional / preference: to remember choices such as your language, audio voice, autoplay setting and other interface preferences, and to hold a guest's learning progress on their own device until they create or sign in to an account. (These rely on localStorage rather than cookies.)
• Analytics (optional, off by default): if the operator chooses to enable them, analytics tools help us understand how the Service is used so we can improve it. These are not active unless explicitly turned on.
• Third-party embedded content: when you play a song video, the embedded YouTube player may set its own cookies, which are governed by Google's privacy policy.

The following first-party cookies are used by our website. Both are strictly necessary for secure operation.

Because these cookies are strictly necessary, they are set without requiring prior consent. Disabling them will prevent you from logging in or signing in with Google.

In addition to cookies, our website uses your browser's localStorage to remember settings and guest progress. localStorage is similar to a cookie in that it stores data on your device, but it is not transmitted to our servers automatically with each request, and it has no built-in expiry — it stays on your device until you or the website clears it. You can remove it at any time by clearing your browser's site data.

Analytics are off by default. We only use them if the operator explicitly enables them. When enabled, the following providers may be used to help us understand how the Service is used, and they set their own cookies:

• Google Analytics 4 / Google Tag Manager — sets cookies such as _ga and _gid.
• Meta (Facebook) Pixel — sets its own cookies.
• TikTok Pixel — sets its own cookies.
• Microsoft Clarity — sets its own cookies.

If none of these tools is enabled, no analytics cookies are set. Where they are enabled, the cookies they set are governed by each provider's own privacy and cookie policies.

Our song pages use an embedded YouTube video player. When you play a video, YouTube/Google may receive your IP address and set their own cookies on your device. These cookies are controlled by Google, not by us, and are governed by Google's privacy policy. If you do not play a video, the YouTube player's cookies are not set in the same way.

We do not control third-party cookies, and we cannot read or change them. To manage them, use your browser settings or the relevant provider's own controls.

Our mobile apps for iOS and Android ("Belajar Mandarin - Zhongwen.id") do not use browser cookies. Instead, they use the device's built-in secure storage and preferences. The session token used to keep you signed in is stored in the device's secure keychain, and your interface preferences are stored using the device's standard preference storage.

You can clear this data through the app or your device's app settings (for example by signing out or removing the app). Note that the in-app YouTube player may still set its own data when you play a video, as described above.

Most browsers let you view, delete and block cookies through their settings. You can usually find these controls in your browser's privacy or security menu. You can also clear localStorage by clearing your browser's site data.

Please note that the cookies marked as strictly necessary (manify_session and manify_oauth_state) are required for core features. If you block or delete them, you will not be able to stay logged in or complete Google sign-in, and parts of the Service will not work.

For third-party cookies, such as those set by the YouTube player or by analytics tools when enabled, you can also use the privacy controls offered by the relevant provider.

Strictly necessary cookies are essential to provide the Service and are set without requiring prior consent. Functional storage such as your saved preferences and guest progress is used to deliver features you have chosen to use and is stored on your own device.

Analytics and the third-party tools listed above are off by default. Where consent is required for any optional cookies under Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022 — the "PDP Law"), we will rely on the appropriate legal basis and, where applicable, ask for your consent. You can withdraw consent or adjust your choices at any time through your browser settings or by contacting us.

We may update this Cookie Policy from time to time to reflect changes in the technologies we use or in legal requirements. When we make material changes, we will update the "Effective / Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have any questions about this Cookie Policy or how we use cookies and similar technologies, please contact us at zhongwenindonesia@gmail.com.