This is an English translation provided for convenience. In case of any discrepancy, the Polish-language version is authoritative.
1. What this document covers
1.1. This Cookie Policy describes the cookies and similar technologies used on the blendlearn.net website and the rules for using the Google Analytics 4 analytics tool and the Meta Pixel marketing tool.
1.2. It supplements the Neon Flower Personal Data Protection Policy, which governs the processing of personal data in accordance with the GDPR (controller, purposes, legal bases, rights). For matters not regulated here, that policy applies.
1.3. The blendlearn.net website is an informational site about the BlendLearn product, addressed to teachers, school principals and language schools. Use of the BlendLearn application itself is governed by separate documents: the application privacy policy and the Terms of Service. If you are a student or the parent of a student, information about the processing of student data can be found in the application privacy policy, in particular in its section 11 (“Children’s privacy”).
1.4. Legal basis for cookies other than necessary ones: Article 399 of the Act of 12 July 2024 — Electronic Communications Law (Journal of Laws 2024, item 1221; consent requirement for storing information or accessing information stored in a terminal device), where that consent meets the GDPR consent standard (Article 400 of the Electronic Communications Law), and Article 6(1)(a) GDPR (consent) for processing data from those cookies.
2. Controller
The controller is NEON FLOWER sp. z o.o., ul. Eliasza Radzikowskiego 94A/106, 31-315 Kraków (KRS 1193580, NIP 9452316953). Contact: privacy@neonflower.ai. Full information about processing and your rights is available in the Personal Data Protection Policy.
3. Cookies and similar technologies used on the website
| Name | Category | Purpose | Lifetime | Consent? |
|---|---|---|---|---|
cc_cookie | Necessary | Remembering your consent decision | ~182 days | Not required |
_ga | Analytics | User identifier (GA4) | 2 years | Yes |
_ga_* | Analytics | Session state (GA4) | 2 years | Yes |
_gid | Analytics | User identifier (GA4) | 24 h | Yes |
_fbp | Marketing | Browser identifier assigned by the Meta Pixel | 90 days | Yes |
_fbc | Marketing | Record of a click on a Meta ad (ClickID parameter) | 90 days | Yes |
firebaseLocalStorageDb (IndexedDB) | Necessary | Recognizing a logged-in user and redirecting to the application | Until cleared | Not required |
3.1. The _fbp and _fbc cookies are stored on the .blendlearn.net domain, and their lifetime is set by Meta’s library, not by us. For _fbc, Meta states 90 days in its own technical documentation; for _fbp it publishes no figure, so we state the lifetime observed directly in the browser. Meta may change either value without our involvement and without notice; we update this table when it does.
4. Consent and its withdrawal
4.1. We activate cookies other than necessary ones only after consent is given in the cookie banner. Until consent is given, they are blocked by the Google Consent Mode v2 mechanism — default state “denied” for all four signals (analytics_storage, ad_storage, ad_user_data, ad_personalization).
4.2. You can change or withdraw your consent at any time using the “Cookie Settings” button in the footer of the website, or by deleting cookies in your browser. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. After consent is withdrawn, the relevant cookies are deleted automatically, Google Analytics stops collecting data and the Meta Pixel stops sending events.
4.3. Analytics consent and marketing consent are independent — you can give one without the other.
4.4. Rejecting is exactly as easy as consenting — the “Accept all” and “Reject all” buttons carry equal visual weight and are both available on the first screen of the banner, without having to open detailed settings.
5. Google Analytics 4
5.1. We use Google Analytics 4 (loaded through the Firebase Analytics SDK) for traffic statistics and to improve the website. The tool collects, among other things, cookie identifiers, a truncated IP address, and information about your device and behaviour on the site.
5.2. We measure: views of page sections, clicks on call-to-action buttons, and the opening of the contact form. We do not send the content entered in the form to Google — we record only the fact that it was opened.
5.3. Provider / processor: Google Ireland Ltd / Google LLC. GA4 data retention period: 14 months. Legal basis: your consent.
5.4. Transfers outside the EEA: data may be transferred to the USA under the EU-U.S. Data Privacy Framework (Google LLC is certified). More: Google Privacy Policy, Google transfer frameworks.
6. Meta Pixel
6.1. After marketing consent is given, we activate the Meta Pixel — a script by Meta that measures how our activity performs on Facebook and Instagram. The Pixel stores the _fbp and _fbc cookies in your browser (see the table in §3) and sends Meta information about two events:
PageView— entering the site. Sent once per full page load; navigating between pages within the site does not generate further events.Lead— clicking the webinar sign-up button.6.2. The
Leadevent means a click, not a registration. The registration itself takes place on the external ClickMeeting platform (see §8.2), where our pixel does not run. Meta receives no information about whether or by whom a registration was completed, nor any data entered in the registration form.6.3. We do not transmit any personal data. Advanced Matching is disabled — both automatically on the script side and in the dataset settings in Meta Events Manager. No email address, first name, surname, phone number or user identifier reaches Meta, including in encrypted (hashed) form. We transmit only the fact of the event and the cookie identifiers listed in §3.
6.4. We do not target ads at children. The
blendlearn.netwebsite is addressed to adults — teachers, principals and school representatives. We do not carry out advertising targeting or profiling of people under 18, and the BlendLearn application itself contains no advertising and no advertising SDKs (see the application privacy policy, section 11.4).6.5. Joint controllership. With respect to collecting data in your browser and transmitting it to Meta, we are joint controllers with Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, D04 X2K5, Ireland) — under Article 26 GDPR. Meta alone is responsible for further processing of that data for its own purposes. The essence of the arrangement: Meta Controller Addendum. Information about data processing by Meta: Meta Privacy Policy and Meta Cookies Policy.
6.6. Legal basis: your consent — Article 6(1)(a) GDPR and Article 399 of the Electronic Communications Law. Without marketing consent the Meta Pixel is not loaded and no connection to Meta’s servers takes place.
6.7. Transfers outside the EEA: data may be transferred to the USA. Meta Platforms Inc. is certified under the EU-U.S. Data Privacy Framework.
6.8. You can withdraw marketing consent at any time — see §4.2. After withdrawal, the Pixel stops sending any events and the
_fbpand_fbccookies are deleted from your browser.
7. Strictly necessary functions that work without consent
7.1. The following processing operations are strictly necessary and work without consent, but we inform you about them:
Server logs / hosting — Firebase Hosting (Google), for security and correct operation of the website.
Recognizing a signed-in user — if you already use the BlendLearn application, the site checks your sign-in state in order to take you straight to the application instead of showing an informational page. This happens in two ways: by reading Firebase Auth data stored in your browser (IndexedDB) and by querying app.blendlearn.net for the session state. If you do not have a BlendLearn account, no data is read this way.
7.2. Fonts are hosted locally on our site — the Nunito, Noto Sans, Righteous and Caveat typefaces are served from blendlearn.net. Visiting the site triggers no call to Google Fonts or to any other third-party CDN, and your IP address does not reach any external party on that account.
8. Contact form
8.1. Data from the contact form is processed under the rules described in the Personal Data Protection Policy — the form is covered by that policy as pre-contractual contact. The form is provided by Tally BV (Belgium, EU; data in the EU). The form script is loaded only after you click a button that opens the form — merely visiting a page causes no connection to Tally’s servers.
8.2. Webinar registration takes place outside this website — on the ClickMeeting platform (ClickMeeting sp. z o.o., Poland). Clicking the registration button takes you to the ClickMeeting site, where that provider’s documents apply. Data entered in the registration form is processed under the rules described in the Personal Data Protection Policy.
9. Your rights
With respect to data processed through cookies and analytics, you have the rights described in the Neon Flower Personal Data Protection Policy, including the right to withdraw consent (see §4) and the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).
10. Changes
We may update this policy; the current version is always available on the website together with its effective date.