Cookie Policy
Last updated: 24 September 2026
1. What are Cookies?
Cookies are small text files stored on your device (computer, phone, tablet) when you visit a website. They allow the website to recognise your device and remember certain information about your session or preferences.
This policy complies with Directive 2002/58/EC (the ePrivacy Directive), transposed into Romanian legislation by Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, as well as with Regulation (EU) 2016/679 (GDPR).
2. How Consent is Managed
The Platform uses a "blocking consent" mechanism in accordance with EDPB Guidelines 05/2020 on consent under Regulation 2016/679 (version 1.1): analytics and marketing cookies are not set until you express your choice.
Embedded third-party video follows the same principle, through a separate mechanism: when the page loads, only a preview image hosted on our own servers is displayed, with no player. The YouTube player — and the cookies it sets — is loaded only after you press the play button, and pressing it constitutes your consent to loading that content. See section 3.7 for details.
We implement Google Consent Mode v2 in "denied by default" mode — all consent signals to Google (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to "denied" until the user's explicit consent. In addition, Google scripts (Google Analytics, Google Tag Manager) are not loaded at all before consent, so until then your browser sends no request to Google. If you withdraw consent, the signals return to "denied" immediately and the Google cookies already set are deleted.
You have the following options in the cookie banner:
- Accept all — activates all cookie categories (necessary, analytics, marketing).
- Necessary only — keeps only the strictly necessary cookies. You continue browsing with full functionality.
- Customise — choose individually for each category.
In accordance with Art. 7(3) GDPR, withdrawing consent is as easy as giving it. You can change your preferences at any time by pressing the "Open cookie settings" button below or from the site footer.
3. Types of Cookies Used
3.1. Strictly Necessary Cookies
These cookies are essential for the functioning of the Platform (authentication, session, security). Without them, the site cannot function properly. In accordance with art. 4(6) of Law no. 506/2004, they do not require consent.
| Cookie | Purpose | Duration |
|---|---|---|
| PHPSESSID | Symfony session identifier — management of the user's session, forms and associated CSRF tokens | 7 days |
| CURSURI_AI_SID | Single session per account (single-session enforcement) — security, preventing concurrent use of the same account | 7 days |
| CURSURI_AI_REMEMBER | "Keep me signed in for 7 days" at login — issued only if you tick that option at login | 7 days |
| cookie_consent | Remembering your cookie preferences (necessary in order to respect the choice you made) | 12 months |
3.2. Functional Cookies
These cookies allow the Platform to provide enhanced features and to identify the technical context in which it is accessed.
| Cookie | Purpose | Duration |
|---|---|---|
| native_app | Detecting the running context in the native mobile application (Capacitor) in order to adapt the interface | Session |
3.3. Payment Processing Cookies
Stripe, Inc. — our payment processor (an independent controller, based in the USA, certified under the EU-US Data Privacy Framework) — sets its own cookies for the purposes of security and fraud prevention in transactions. These are set only on the pages where payments are processed.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| __stripe_mid | Identifier for fraud detection in transactions (Stripe Radar) | Stripe, Inc. | 1 year |
| __stripe_sid | Session identifier for fraud detection in transactions (Stripe Radar) | Stripe, Inc. | 30 minutes |
3.4. Affiliate Attribution Cookies (require consent)
These cookies are used exclusively for the correct attribution of sales to the affiliates who recommended the Platform. They do not collect users' personal data and are not used for behavioural profiling or targeted advertising.
The affiliate attribution cookie is set ONLY after your consent for the "Marketing" category (art. 4(5) of Law no. 506/2004). Without this consent, reaching the Platform through an affiliate link leaves no information in your browser. If you withdraw consent, the cookie is deleted on the next page load.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| gl_ref | Attribution of conversions to affiliates in the Platform's own affiliate programme — stores the referral code, does not identify the user | GALIAN SOFTWARE DEVELOPMENT SRL (first-party cookie) | 30 days |
3.5. Analytics Cookies (require consent)
These cookies help us understand how visitors interact with the Platform, which pages are the most visited and where difficulties occur. The data is aggregated and pseudonymised (the IP is truncated). They are set ONLY after your explicit consent for the "Analytics" category.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| _ga | Distinguishes unique users (Google Analytics 4) | Google Ireland Limited | 2 years |
| _ga_<container-id> | Persistence of the Google Analytics 4 session state | Google Ireland Limited | 2 years |
| _gid | Distinguishes users within a day (when set) | Google Ireland Limited | 24 hours |
Google Analytics data may be transferred to Google's servers, including outside the EEA. Google LLC is certified under the EU-US Data Privacy Framework. More details: Google Privacy Policy. You can also install the Google Analytics Opt-out Browser Add-on.
3.6. Marketing and Advertising Cookies (require consent)
These cookies are used to measure the effectiveness of advertising campaigns and, possibly, to display relevant ads. They are set ONLY after your explicit consent for the "Marketing" category.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| _gcl_au | Conversion linker for Google Ads — measuring conversions on the site | Google Ireland Limited | 90 days |
| _gcl_aw | Attribution of conversions to Google Ads campaigns (set when an ad is clicked) | Google Ireland Limited | 90 days |
Google Tag Manager (container GTM-KBDP3V9H) is used for the centralised management of marketing and analytics tags. GTM itself does not set tracking cookies; it controls the loading of the other tags (GA4, Google Ads) depending on your consent. The list of cookies may vary depending on the campaigns active at any given time.
3.7. Embedded Third-Party Video — YouTube (requires consent)
Some public presentation pages include video clips hosted on YouTube, a service provided to users in the European Economic Area by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
When it loads. These clips are not loaded automatically. When the page opens you only see a preview image hosted on our own servers, together with a play button; in that state no request is made to YouTube and none of its cookies is set on your device. The YouTube player is loaded only once you press the play button, and pressing it constitutes your consent to loading that content. From that moment on, YouTube may set cookies and similar technologies and may receive your IP address and information about your browser.
Without JavaScript. If you have JavaScript disabled in your browser, the page displays a plain link to YouTube instead of the preview image. In that case too, nothing is loaded from YouTube and none of its cookies are set without an action from you.
For what purpose. The cookies set by YouTube serve the playback of the clip itself, the storing of playback preferences (for example volume or picture quality) and audience measurement by Google. We do not publish a list of names and durations for these cookies, because they are determined solely by the provider and may be changed by it; up-to-date information is available in the Google cookie policy and in the Google Privacy Policy.
What you should know. The choice to play a clip is made separately from the cookie banner and is not stored by us: when the page is reloaded or on a later visit, the clip returns to the preview-image state and the player is loaded again only if you press the play button. If you are signed in to a Google account in the same browser, YouTube may associate the playback with that account.
4. Legal Bases
- Strictly necessary cookies: art. 4(6) of Law no. 506/2004 — they do not require consent, being essential for providing the service requested by the user.
- Functional, analytics and marketing cookies: the user's consent (art. 4(5) of Law no. 506/2004, in conjunction with Art. 6(1)(a) GDPR and with EDPB Guidelines 05/2020 on consent under Regulation 2016/679, version 1.1).
- Payment processing cookies (Stripe): the legitimate interest of the operator and of the payment processor in preventing fraud (Art. 6(1)(f) GDPR), as well as the legal obligation to ensure the security of transactions (Art. 6(1)(c) GDPR — DSP2 / PSD2).
- Cookies set by embedded video content (YouTube): your consent, expressed by pressing the play button on the preview image (art. 4(5) of Law no. 506/2004, in conjunction with Art. 6(1)(a) GDPR). Until that moment, nothing is loaded from YouTube.
- Affiliate attribution cookie (gl_ref): your consent for the "Marketing" category (art. 4(5) of Law no. 506/2004, in conjunction with Art. 6(1)(a) GDPR). This cookie does NOT collect identifiable personal data and is NOT used for behavioural profiling or advertising.
5. Data Transfers outside the EEA
Some cookies (Stripe, Google Analytics, Google Ads, as well as those set by the YouTube player once you choose to play a clip) involve the transfer of data to controllers based outside the European Economic Area, mainly in the United States. These transfers take place on the basis of:
- Certification under the EU-US Data Privacy Framework (EC Adequacy Decision 2023/1795) — applicable to Google LLC and Stripe, Inc.
- The Standard Contractual Clauses adopted by the European Commission (Decision 2021/914), where applicable.
6. How You Can Manage Cookies
Change your Cursuri AI preferences: in accordance with Art. 7(3) GDPR and Art. 4 of Law no. 506/2004, you have the right to withdraw or change your cookie consent at any time, as easily as you gave it.
In addition to the settings in the Platform, you can also control and/or delete cookies directly from your browser. Most browsers allow you to:
- View the cookies stored on your device.
- Delete cookies individually or all of them.
- Block third-party cookies.
- Block all cookies (note: some features of the Platform will not work).
- Receive notifications when a cookie is set.
Instructions for the most commonly used browsers:
7. Changes to the Cookie Policy
We reserve the right to update this policy to reflect legal, technical or operational changes. Any significant change will be signalled by re-displaying the cookie banner, giving you the opportunity to review and reconfirm your preferences. The current version is always published on this page, together with the date of the last update.
8. Contact and Your Rights
For any questions regarding the use of cookies or to exercise the rights provided for by the GDPR (access, rectification, erasure, restriction, portability, objection), you can contact us:
- Operator: GALIAN SOFTWARE DEVELOPMENT SRL
- Tax ID (CUI): RO45988048 · Trade Register (ONRC): J12/2051/2022
- Address: Str. Tulcea nr. 6, 400594, Cluj-Napoca, Cluj County, Romania
- Email: contact@cursuri-ai.ro
If you consider that the processing of your data through cookies infringes the applicable legislation, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — the Romanian data protection authority, B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro.