Legal Document · GDPR Compliant

Cookie Policy

Effective Date

May 20, 2026

Regulatory Basis

GDPR + ePrivacy Directive

Version

1.0

This Cookie Policy explains what cookies are, how we use them on this platform, the legal basis for each category, and how you can manage your preferences. It must be read in conjunction with our Privacy Policy and is issued in compliance with Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC (ePrivacy Directive) as implemented in Polish law (Ustawa Prawo Telekomunikacyjne, art. 173).

1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, smartphone) when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect information about how you interact with the site.

Similar technologies include web beacons (transparent pixel images), local storage, and session storage. References to "cookies" in this Policy cover all such technologies unless stated otherwise.

2. Who Places Cookies?

Cookies on this platform are placed by:

  • First-party cookies — set directly by us (the platform operator) to make the site function correctly.
  • Third-party cookies — set by our trusted partners (e.g., analytics or advertising providers) whose scripts we embed on our pages.

3. Categories of Cookies We Use

We group cookies into four categories. Only Strictly Necessary cookies are placed without consent. All other categories require your prior, freely-given, specific, and informed consent.

Strictly Necessary
Opt-out: No  · Basis: Art. 6(1)(b) — Contract / Art. 6(1)(c) — Legal obligation
Cookie NamePurposeDuration
session_idMaintains your authenticated sessionSession
csrf_tokenPrevents cross-site request forgery attacksSession
cookie_consentStores your cookie consent preferences12 months
Functional
Opt-out: Yes  · Basis: Art. 6(1)(a) — Consent
Cookie NamePurposeDuration
lang_prefRemembers your selected language preference12 months
ui_themeStores your interface display preferences6 months
Analytics
Opt-out: Yes  · Basis: Art. 6(1)(a) — Consent
Cookie NamePurposeDuration
_gaGoogle Analytics — distinguishes unique users24 months
_ga_*Google Analytics — maintains session state24 months
plausible_ignoreOpt-out flag for privacy-friendly analyticsForever
Marketing
Opt-out: Yes  · Basis: Art. 6(1)(a) — Consent
Cookie NamePurposeDuration
_fbpFacebook Pixel — tracks conversions for ad attribution3 months
ads_sessionAd platform session identifier for retargetingSession

4. Legal Basis for Cookie Processing

In line with GDPR and the ePrivacy Directive:

  • Strictly Necessary cookies do not require consent. They are placed on the basis of our legitimate interest in providing a functioning service (Art. 6(1)(f)) or necessity for contract performance (Art. 6(1)(b)).
  • Functional, Analytics, and Marketing cookies are placed only upon your prior, explicit consent (Art. 6(1)(a) GDPR). Consent is obtained via our cookie consent banner and is granular per category.

Consent records — including category, timestamp, IP address hash, and consent banner version — are stored for compliance purposes for a period of 3 years.

5. Cookie Consent Mechanism

On your first visit to the platform, a cookie consent banner is displayed. You may:

  • Accept all — consent to all cookie categories.
  • Reject all non-essential — only Strictly Necessary cookies will be placed.
  • Manage preferences — toggle individual categories on or off.

The banner will not pre-tick optional categories or use dark patterns. Consent is as easy to withdraw as it is to give. You may update your preferences at any time via the Cookie Settings panel, accessible from the footer of every page.

6. How to Manage and Withdraw Consent

You can control cookies through several methods:

  • Platform Cookie Settings: Use the Cookie Settings panel in the footer to update your consent choices at any time. Changes take effect immediately.
  • Browser settings: Most browsers allow you to block or delete cookies via their privacy or security settings. Note that blocking Strictly Necessary cookies may impair platform functionality.
    • Chrome: Settings → Privacy and security → Cookies
    • Firefox: Options → Privacy & Security → Cookies and Site Data
    • Safari: Preferences → Privacy → Manage Website Data
    • Edge: Settings → Privacy, search, and services → Cookies
  • Google Analytics opt-out: Install the Google Analytics Opt-out Browser Add-on.

7. Third-Party Cookies and Services

Third-party services embedded on our platform may set their own cookies subject to their own privacy and cookie policies. We encourage you to review these:

We are not responsible for the cookies or privacy practices of third-party services. Third-party analytics cookies are only activated after your consent.

8. International Transfers via Cookies

Some third-party cookies (e.g., Google Analytics) involve the transfer of data to the United States. Such transfers are made on the basis of Standard Contractual Clauses (SCCs) or other safeguards pursuant to Art. 46 GDPR. We only activate these cookies after receiving your explicit consent.

9. Retention of Cookie Data

Cookie retention periods are listed in the cookie table in Section 3. Session cookies are deleted automatically when you close your browser. Persistent cookies expire after the period shown unless deleted earlier. You can delete all stored cookies at any time via your browser settings or our Cookie Settings panel.

10. Your Rights

As a data subject, you retain all rights under GDPR Art. 15–22 in relation to personal data processed through cookies (e.g., analytics identifiers linked to your device). These include the right to access, rectification, erasure, and the right to object. To exercise these rights, please contact us via the details in our Privacy Policy.

You also have the right to lodge a complaint with the Polish supervisory authority: UODO — uodo.gov.pl.

11. Changes to This Cookie Policy

We may update this Cookie Policy to reflect changes in technology, law, or our practices. Material changes will be communicated via the platform or by email at least 14 days in advance. We will re-request your consent where required by law.

Legal Disclaimer: This document is a template and does not constitute legal advice. It should be reviewed and customised by a qualified legal professional, and the cookie inventory should be verified using a cookie scanning tool before deployment in a live environment.