Cookie policy
Why we do not ask for your consent
The site uses no analytics, advertising pixels or tracking tools. We store exactly two values in your browser and both are necessary for a function you asked for yourself - signing in and activating access.
The law requires consent for storing information on a user's device except where it is necessary to provide a service the user has requested (Article 399 of the Polish Electronic Communications Law, implementing Directive 2002/58/EC). This is that exception.
A consent banner, when there is nothing to decline, would be an obstacle with no benefit to you - a click that changes nothing. So instead of a banner we describe here plainly what is stored and why.
If analytics or a marketing tool ever appeared, a consent banner would become required - and it would be added together with the ability to refuse optional categories and to change that decision later.
Exactly what we store
The values below go into the browser's localStorage - they are not classic cookies, so
they are not sent to the server with every request. They stay on your device.
| Name | Provider | Purpose | Type | Storage period |
|---|---|---|---|---|
sb-<identifier>-auth-token |
Supabase | Keeping you signed in. Without it every page refresh would sign you out. | Necessary | Until sign-out or session expiry |
czasnato.pending-license-key.v1 |
CzasNaTo | Holds the access key entered during sign-up until the email address is confirmed. Without it the key would have to be typed a second time. | Necessary | Until the key is activated; removed immediately after use |
Hosting provider cookies
The site runs on Cloudflare infrastructure. The provider may set technical cookies of its own to protect against attacks and abuse - they are not set by our code and we have no access to them.
| Name | Provider | Purpose | Type | Storage period |
|---|---|---|---|---|
__cf_bm and related |
Cloudflare | Telling human traffic from automated traffic, protection against abuse | Necessary | Short-lived, set as needed |
Checked on 29 August 2026 against the live site: going through the home page, the contact page, both policies and the sign-in screen set not a single cookie. Browser storage before signing in also stays empty.
The row above stays all the same, because Cloudflare may reach for a technical cookie as needed - for example when the site comes under increased automated traffic. So we describe a possibility, not a permanent state; under normal conditions nothing appears.
What is not here
- Google Analytics, GA4, Google Ads,
- Meta Pixel, Facebook Pixel, TikTok Pixel,
- Hotjar, Microsoft Clarity, session recording,
- heat maps and A/B tests,
- external fonts - the typeface is the system one, nothing loads from a foreign server,
- embedded videos and social media plugins.
The mobile app
The phone app uses no cookies. The session token goes into the system key store (Keychain on iOS, Keystore on Android). Activities, photos and settings are held by a local database on the device - we do not send them to CzasNaTo servers. A system backup on Android or iOS may however include them; that is decided by device settings, not by our app.
How to delete stored data
- Signing out removes the session token.
- Browser settings let you clear site data - in Chrome and Edge: Settings → Privacy → Cookies and other site data; in Firefox and Safari, in the corresponding privacy section.
- Clearing site data will sign you out and you will need to sign in again.
More information
The scope of the data, the legal bases and your rights are described in the privacy policy.