Cookies policy
Last updated:
This policy describes the cookies and similar technologies used on reklamuj.ai. We publish it under Article 5(3) of Directive 2002/58/EC (the ePrivacy Directive), the Polish Electronic Communications Law, and, as regards personal data, the GDPR.
1. The short version
We put cookies into two groups and treat them entirely differently.
Strictly necessary — remembering your chosen language version, keeping you logged in, and storing your answer to the banner. These always run. They are exempt from the consent requirement under Article 5(3) of Directive 2002/58/EC, because without them the site cannot do what you are asking it to.
Analytics and marketing — these let us count which pages earn their place and measure whether an ad worked. We run them through Google Tag Manager. None of them starts until you agree in the banner. Until then not one of these files is created on your device.
We sell no data, and we build no profiles used to make decisions about you.
You can withdraw consent at any time, exactly as easily as you gave it, through the Cookie settings link in the footer of every page. Refusing is one click, the same as agreeing, and it locks you out of nothing.
2. What a cookie is
A cookie is a small text file your browser stores on your device. It holds a name, a value, an expiry time and the domain that set it. The site reads it on later requests, which is how it can “remember” a choice you made earlier.
Alongside cookies, browsers offer local storage. It works similarly, but the data is never sent to a server — it stays on your device. We describe our use of local storage in clause 4, because the duty to inform you is the same.
3. Strictly necessary cookies
All of the below are first-party cookies — we set them from our own domain and no third party can read them.
| Name | Purpose | Category | Retention |
|---|---|---|---|
app-locale | Remembers your language version, whether detected automatically or picked by you in the language switcher. Without it we would work the language out again on every visit and override your choice. | Strictly necessary | 12 months |
sb-<identifier>-auth-token | Keeps your session alive after signing in to the admin panel. Written only after sign-in, and split into parts if it exceeds the size limit. Set by our authentication provider (Supabase) acting as our processor. | Strictly necessary | For the session, until sign-out |
The admin panel is available only to our own team. If you do not sign in to it, the second cookie above is never created on your device.
Your answer to the banner is not a cookie — we keep it in browser local storage, under the key described in clause 5. Recording a refusal does not itself need consent, because its only purpose is to stop us asking you the same question on every visit.
The application at app.reklamuj.ai is a separate product and sets its own session cookies, which are necessary to keep you signed in. Information about those is provided within the application itself.
4. Analytics and marketing cookies — only with your consent
We handle these through Google Tag Manager (Google Ireland Limited). The manager itself sets no cookies; it is a container that loads the individual measurement tools.
The container loads on every page, but before it does we hand it Google Consent
Mode v2 signals set to denied. In practice that means the tools inside it write
no file and send no measurement until you click I agree. If you choose
Necessary only, the signals stay denied and nothing changes.
Once you have agreed, the cookies below may be created. Google sets them as our processor, on our instructions.
| Name | Purpose | Category | Retention |
|---|---|---|---|
_ga | Tells devices apart, so two visits from one browser are not counted as two people. | Analytics — consent required | 24 months |
_ga_<stream id> | Holds the state of the measurement session for one data stream. | Analytics — consent required | 24 months |
_gcl_au | Links a visit to a click on an ad, so its effectiveness can be measured. | Marketing — consent required | 90 days |
This list covers the cookies set by the tools currently live in the container. If we add another tool that sets anything beyond strictly necessary cookies, we will update this table before it starts running.
Data from these cookies reaches Google and may be processed outside the European Economic Area — clause 5 of the Privacy policy explains that. The only basis is your consent, Article 6(1)(a) GDPR.
5. Browser local storage
| Key | Purpose | Retention |
|---|---|---|
theme | Remembers whether you chose the light or the dark theme. | Until you clear browser data |
banner-dismissed | Remembers that you closed the notice bar at the top of the page, so it is not shown again. | Until you clear browser data |
cookie-consent | Remembers your answer to the consent banner — granted or denied. Without it we would ask on every visit. | Until you clear browser data |
None of these keys contains anything that identifies you, and none is sent to our server.
6. How the language version is decided
On your first visit we work out the language from the Accept-Language header
your browser sends and the country information our infrastructure provider
supplies. We store the result in the app-locale cookie. From then on only that
cookie decides, and if you change language with the switcher in the header we
store your choice and never override it with automatic detection.
We do not store your IP address for this purpose — we use it only in passing, to determine the country for that one request.
7. Managing cookies
You can change your answer on analytics and marketing cookies at any time through the Cookie settings link in the footer of every page. Withdrawal takes effect immediately: the tools in the container stop writing files and stop sending measurements. Files written earlier can be deleted in your browser settings, as below.
You can also delete stored cookies and block new ones at any time in your browser settings:
- Chrome — Settings → Privacy and security → Third-party cookies and site data
- Firefox — Settings → Privacy & Security → Cookies and Site Data
- Safari — Settings → Privacy
- Edge — Settings → Cookies and site permissions
Bear in mind that blocking strictly necessary files affects how the site works: it will decide your language afresh on every visit, ignoring your earlier choice, and signing in to the panel will stop working. Clearing local storage restores the default theme, shows the dismissed notice bar again, and makes the consent banner ask you once more.
8. Personal data and your rights
Where the information held in a cookie amounts to personal data, the controller is the company identified in the Privacy policy. There are two bases, depending on the category:
- strictly necessary cookies — Article 6(1)(f) GDPR, our legitimate interest in the correct and secure operation of the site;
- analytics and marketing cookies — Article 6(1)(a) GDPR, meaning your consent and nothing else. Withdrawing it does not affect the lawfulness of processing carried out before the withdrawal.
You have the rights described in clause 7 of the Privacy policy, including access, rectification, erasure and objection, as well as the right to complain to the President of the Polish Personal Data Protection Office.
9. Changes to this policy
If we add another tool that sets anything beyond strictly necessary cookies, we will update this policy and bring it under the consent banner before it starts running. We do not run analytics or behavioural advertising without asking you first.
10. Contact
Questions about cookies and privacy: contact@reklamuj.ai.