Cookie Policy
Last updated: 29 April 2026
1. What are Cookies?
Cookies are small text files stored on your device (computer, phone, tablet) when you visit a website. They allow the website to recognise your device and remember certain information about your session or preferences.
This policy complies with Directive 2002/58/EC (the ePrivacy Directive), transposed into Romanian legislation by Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector, as well as with Regulation (EU) 2016/679 (GDPR).
2. How Consent is Managed
The Platform uses a "blocking consent" mechanism in accordance with EDPB Guidelines 03/2022 on consent models: on your first visit, no analytics, marketing or third-party cookie (other than those strictly necessary) is set until you express your choice.
We implement Google Consent Mode v2 in "denied by default" mode — all consent signals to Google (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to "denied" until the user's explicit consent.
You have the following options in the cookie banner:
- Accept all — activates all cookie categories (necessary, functional, analytics, marketing).
- Reject all — keeps only the strictly necessary cookies. You continue browsing with full functionality.
- Settings — choose individually for each category.
In accordance with Art. 7(3) GDPR, withdrawing consent is as easy as giving it. You can change your preferences at any time by pressing the "Open cookie settings" button below or from the site footer.
3. Types of Cookies Used
3.1. Strictly Necessary Cookies
These cookies are essential for the functioning of the Platform (authentication, session, security). Without them, the site cannot function properly. In accordance with Art. 5(5) of Law no. 506/2004, they do not require consent.
| Cookie | Purpose | Duration |
|---|---|---|
| PHPSESSID | Symfony session identifier — management of the user's session, forms and associated CSRF tokens | 7 days |
| CURSURI_AI_SID | Single session per account (single-session enforcement) — security, preventing concurrent use of the same account | 7 days |
| CURSURI_AI_REMEMBER | "Keep me signed in for 7 days" at login — issued only if you tick that option at login | 7 days |
| cookie_consent | Remembering your cookie preferences (necessary in order to respect the choice you made) | 12 months |
3.2. Functional Cookies
These cookies allow the Platform to provide enhanced features and to identify the technical context in which it is accessed.
| Cookie | Purpose | Duration |
|---|---|---|
| native_app | Detecting the running context in the native mobile application (Capacitor) in order to adapt the interface | Session |
3.3. Payment Processing Cookies
Stripe, Inc. — our payment processor (an independent controller, based in the USA, certified under the EU-US Data Privacy Framework) — sets its own cookies for the purposes of security and fraud prevention in transactions. These are set only on the pages where payments are processed.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| __stripe_mid | Identifier for fraud detection in transactions (Stripe Radar) | Stripe, Inc. | 1 year |
| __stripe_sid | Session identifier for fraud detection in transactions (Stripe Radar) | Stripe, Inc. | 30 minutes |
3.4. Affiliate Attribution Cookies
These cookies are used exclusively for the correct attribution of sales to the affiliates who recommended the Platform. They do not collect users' personal data and are not used for behavioural profiling or targeted advertising.
The affiliate attribution cookies are set on the basis of the operator's legitimate interest (Art. 6(1)(f) GDPR and Art. 5(3), final sentence, of Law no. 506/2004), being strictly necessary for the proper functioning of the affiliate programme and the correct remuneration of the partners who generated the conversion. You have the right to object to processing based on legitimate interest in accordance with Art. 21 GDPR (contact details: see the Privacy Policy).
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| gl_ref | Attribution of conversions to affiliates in the Platform's own affiliate programme — stores the referral code, does not identify the user | GALIAN SOFTWARE DEVELOPMENT SRL (first-party cookie) | 30 days |
| _twoAttr | Attribution of conversions in the 2Performant affiliate network — identifies the traffic source (the affiliate), not the user | 2Performant Network SRL | According to the 2Performant attribution period (usually 30 days) |
3.5. Analytics Cookies (require consent)
These cookies help us understand how visitors interact with the Platform, which pages are the most visited and where difficulties occur. The data is aggregated and pseudonymised (the IP is truncated). They are set ONLY after your explicit consent for the "Analytics" category.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| _ga | Distinguishes unique users (Google Analytics 4) | Google Ireland Limited | 2 years |
| _ga_<container-id> | Persistence of the Google Analytics 4 session state | Google Ireland Limited | 2 years |
| _gid | Distinguishes users within a day (when set) | Google Ireland Limited | 24 hours |
Google Analytics data may be transferred to Google's servers, including outside the EEA. Google LLC is certified under the EU-US Data Privacy Framework. More details: Google Privacy Policy. You can also install the Google Analytics Opt-out Browser Add-on.
3.6. Marketing and Advertising Cookies (require consent)
These cookies are used to measure the effectiveness of advertising campaigns and, possibly, to display relevant ads. They are set ONLY after your explicit consent for the "Marketing" category.
| Cookie | Purpose | Provider | Duration |
|---|---|---|---|
| _gcl_au | Conversion linker for Google Ads — measuring conversions on the site | Google Ireland Limited | 90 days |
| _gcl_aw | Attribution of conversions to Google Ads campaigns (set when an ad is clicked) | Google Ireland Limited | 90 days |
Google Tag Manager (container GTM-KBDP3V9H) is used for the centralised management of marketing and analytics tags. GTM itself does not set tracking cookies; it controls the loading of the other tags (GA4, Google Ads) depending on your consent. The list of cookies may vary depending on the campaigns active at any given time.
4. Legal Bases
- Strictly necessary cookies: Art. 5(5) of Law no. 506/2004 — they do not require consent, being essential for providing the service requested by the user.
- Functional, analytics and marketing cookies: the user's consent (Art. 5(3), first sentence, of Law no. 506/2004, in conjunction with Art. 6(1)(a) GDPR and with EDPB Guidelines 03/2022 and EDPB Opinion 05/2020).
- Payment processing cookies (Stripe): the legitimate interest of the operator and of the payment processor in preventing fraud (Art. 6(1)(f) GDPR), as well as the legal obligation to ensure the security of transactions (Art. 6(1)(c) GDPR — DSP2 / PSD2).
- Affiliate attribution cookies (gl_ref, _twoAttr): the operator's legitimate interest (Art. 6(1)(f) GDPR) and the "communication/requested service" exception (Art. 5(3), second sentence, of Law no. 506/2004) — necessary for the functioning of the affiliate programme and the correct remuneration of the partners. These cookies do NOT collect identifiable personal data and are NOT used for behavioural profiling or advertising.
5. Data Transfers outside the EEA
Some cookies (Stripe, Google Analytics, Google Ads) involve the transfer of data to controllers based outside the European Economic Area, mainly in the United States. These transfers take place on the basis of:
- Certification under the EU-US Data Privacy Framework (EC Adequacy Decision 2023/1795) — applicable to Google LLC and Stripe, Inc.
- The Standard Contractual Clauses adopted by the European Commission (Decision 2021/914), where applicable.
6. How You Can Manage Cookies
Change your Cursuri AI preferences: in accordance with Art. 7(3) GDPR and Art. 4 of Law no. 506/2004, you have the right to withdraw or change your cookie consent at any time, as easily as you gave it.
In addition to the settings in the Platform, you can also control and/or delete cookies directly from your browser. Most browsers allow you to:
- View the cookies stored on your device.
- Delete cookies individually or all of them.
- Block third-party cookies.
- Block all cookies (note: some features of the Platform will not work).
- Receive notifications when a cookie is set.
Instructions for the most commonly used browsers:
7. Changes to the Cookie Policy
We reserve the right to update this policy to reflect legal, technical or operational changes. Any significant change will be signalled by re-displaying the cookie banner, giving you the opportunity to review and reconfirm your preferences. The current version is always published on this page, together with the date of the last update.
8. Contact and Your Rights
For any questions regarding the use of cookies or to exercise the rights provided for by the GDPR (access, rectification, erasure, restriction, portability, objection), you can contact us:
- Operator: GALIAN SOFTWARE DEVELOPMENT SRL
- Tax ID (CUI): RO45988048 · Trade Register (ONRC): J12/2051/2022
- Address: Str. Tulcea nr. 6, 400594, Cluj-Napoca, Cluj County, Romania
- Email: contact@cursuri-ai.ro
If you consider that the processing of your data through cookies infringes the applicable legislation, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — the Romanian data protection authority, B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro.