Cookie Policy

Yi Folio LLC | yifolio.com | vocabfolio.app

Last Updated: August 4, 2026

1. What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit (such as your login session or preferences) and help us understand how visitors use the site. We also use similar technologies such as local storage and web beacons. When this policy refers to "cookies," it includes these similar technologies unless stated otherwise.

2. How We Use Cookies

YiFolio and VocabFolio use cookies to:

  • Keep you securely logged in to your account across browser sessions.
  • Remember your cookie consent preferences.
  • Understand how visitors use our websites (pages viewed, session duration, navigation paths).
  • Process payments securely via Stripe.
  • Analyze traffic sources and marketing campaign performance.

Non-essential cookies (analytics, marketing) are only placed with your explicit consent.

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the websites to function. They enable core features such as user authentication, security, and remembering your cookie consent choice. These cookies are always active and cannot be disabled without breaking the Service.

3.2 Analytics Cookies

These cookies help us understand how visitors interact with our websites by collecting information such as pages visited, time on page, device type, and traffic source. Analytics data is aggregated and does not directly identify individual users.

3.3 Marketing Cookies

These cookies may be used to understand referral sources, measure marketing campaign performance, and support engagement analysis. They may track your visit across websites. You may enable or disable these cookies via the cookie consent banner.

3.4 Third-Party Cookies

Some cookies on our websites are placed by third-party service providers. These providers have their own privacy and cookie policies that govern how they process data collected through their cookies. We do not control third-party cookies.

4. Cookie Inventory

The following table lists the specific cookies used on our websites:

Cookie NameProviderPurposeTypeDuration
sb-access-tokenSupabase (Yi Folio)Authenticates your login session in VocabFolio. Required for all app functionality.NecessarySession
sb-refresh-tokenSupabase (Yi Folio)Refreshes your authentication session so you stay logged in without re-entering credentials.Necessary30 days
cookie_consentYi Folio LLCStores your cookie consent preferences so the banner does not reappear on every visit.Necessary1 year
_gaGoogle AnalyticsDistinguishes unique users. Used to generate statistical data on site usage.Analytics2 years
_ga_[ID]Google AnalyticsPersists session state for Google Analytics GA4 properties.Analytics2 years
_gidGoogle AnalyticsDistinguishes unique users within a 24-hour period for traffic analysis.Analytics24 hours
__stripe_midStripeFraud prevention and security during payment processing.Necessary1 year
__stripe_sidStripeMaintains your active payment session during checkout.Necessary30 minutes
_fbpMeta (Facebook)Used to deliver and measure advertising on Facebook and partner sites, if applicable.Marketing90 days
Cookie names and configurations may change as we update our technology stack. This table is reviewed and updated at least every 6 months. Revisit this page for the most current list.

5. Managing Your Cookie Preferences

You control which non-essential cookies are placed on your device:

  • Cookie Consent Banner — on your first visit, a banner allows you to accept or reject analytics and marketing cookies. You can change your preferences at any time via the Cookie Settings link in the website footer.
  • Browser Settings — you can configure your browser to block or delete cookies. Note that disabling necessary cookies will prevent you from logging into VocabFolio.
  • Browser Extensions — tools such as Privacy Badger or uBlock Origin can manage cookies across all websites.
  • Google Analytics Opt-Out — to opt out of Google Analytics tracking across all websites, install the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

You may withdraw your cookie consent at any time. Withdrawal does not affect cookies already placed on your device before you withdrew consent.

6. Do Not Track (DNT)

Some browsers offer a "Do Not Track" (DNT) signal that informs websites you prefer not to be tracked. Our websites do not currently respond to DNT signals. You can manage your tracking preferences through the cookie consent banner or browser settings described above.

7. Cookie Retention

As shown in the Cookie Inventory above, cookies remain on your device for varying periods: session cookies expire when you close your browser; persistent cookies expire after the period shown in the Duration column or until you manually delete them.

8. Third-Party Provider Privacy Policies

The third-party providers whose cookies we use have their own privacy and cookie policies. We encourage you to review them:

  • Google Analytics: https://policies.google.com/privacy
  • Stripe: https://stripe.com/privacy
  • Supabase: https://supabase.com/privacy
  • Meta (Facebook): https://www.facebook.com/privacy/policy

9. Regulatory Compliance

Our cookie practices are designed to comply with:

  • EU General Data Protection Regulation (GDPR) — explicit consent is obtained before placing non-essential cookies.
  • EU ePrivacy Directive — information about cookies is provided clearly before consent is sought.
  • California Consumer Privacy Act (CCPA/CPRA) — marketing cookies that may constitute "sharing" under CCPA can be opted out via the cookie consent banner.
  • Taiwan Personal Data Protection Act (PDPA) — non-essential cookies that collect personal data are placed only with consent.

10. Updates to This Policy

This Cookie Policy may be updated to reflect changes in technology, our service, or applicable regulations. The "Last Updated" date at the top indicates the most recent revision. Material changes will be communicated via the cookie consent banner or a notice on our websites.

11. Mobile App — Android Tracking Technologies

This section applies specifically to the VocabFolio Android mobile application. Mobile apps use a different technical stack from web browsers — traditional browser cookies are replaced by device-level identifiers and local storage mechanisms. This section explains what technologies the Android app uses in place of cookies.

11.1 What Replaces Browser Cookies on Android

When you use VocabFolio on Android, the following technologies serve similar functions to the cookies described in Sections 2–7 of this policy:

  • Supabase JWT (JSON Web Token) — Purpose: Authenticates your login session. Equivalent to: sb-access-token / sb-refresh-token. Duration: Session / auto-refreshed.
  • Android Advertising ID (AAID) — Purpose: Internal analytics and usage measurement. Equivalent to: _ga analytics cookies. Opt-out: Settings → Google → Ads → Reset Advertising ID.
  • Local Storage (device) — Purpose: Stores your app preferences and offline data. Equivalent to: Preference/session cookies. Duration: Until app uninstall or manual clear.
  • Local Notifications (optional) — Purpose: Displays study reminders scheduled through your device's notification API. No push-notification token is registered and no data is sent to our servers. Equivalent to: No direct web equivalent. Opt-out: Device Settings → Notifications → VocabFolio.

11.2 No Third-Party Ad Networks at Launch

VocabFolio does not use any third-party advertising networks or ad SDKs in the Android app at launch. The Android Advertising ID (AAID) is collected solely for internal analytics. If we introduce advertising in the future, we will update this policy and notify you in advance.

11.3 Google Play Services

The Android app is distributed via the Google Play Store and may use Google Play Services (e.g. for authentication via Google Sign-In). Google Play Services may collect usage data subject to Google's own privacy policies. We do not control or have access to data collected by Google Play Services beyond what is described in this policy.

Summary: Web vs. Android Tracking — Web app (browser): Uses cookies listed in Sections 3–6 (session, preference, analytics, payment cookies). Android app: Uses device-level technologies — AAID, local storage, JWT tokens, and local notifications — described in this section. Supabase analytics/auth and Stripe apply to both platforms where applicable.

12. Contact Us

If you have questions about this Cookie Policy or our use of cookies, contact us at:

Yi Folio LLC

Email: contact@vocabfolio.app | hello@yifolio.com

Websites: yifolio.com / vocabfolio.app

Address: 30 N. Gould St. Ste. N., Sheridan, WY 82801, United States