Cookie policy

1. Operator

Wiktor Wanat IT Solutions, ul. Przewóz 32B/81, 30-716 Kraków, Poland; email: wanatwiktor08@gmail.com, phone: +48 530 538 544.

2. Authentication and security

Supabase sets first-party session cookies, normally beginning with sb- and containing auth-token. They may be split into chunks. These identify signed-in users, refresh sessions and protect account access.

Sign-in, email confirmation and password recovery may also set code-verifier cookies to complete authentication securely. Supabase’s library defaults to a maximum cookie lifetime of 400 days from writing, which may be renewed. Actual session and authentication-code validity is separate and may expire sooner. Signing out removes the session cookies managed by the application.

3. Language selection

The localStorage entry staayguide-site-locale contains only pl or en. It is written when you select a language and remembers that choice across pages. It has no automatic expiry and remains until you clear website data or change the setting. It is not an advertising identifier.

4. Basis for using storage

Storage strictly necessary for a service you expressly request, including authentication and the selected language, falls within the exception in Article 399 of Poland’s Electronic Communications Law. Vercel Web Analytics does not use third-party cookies and provides aggregated visit statistics. We do not enable advertising trackers or send identifying user data to analytics.

5. External services

Fonts are served locally. Direct requests for Unsplash images connect to that provider, as explained in the privacy policy. Vercel Web Analytics works without third-party cookies and records aggregated information such as visited URLs, device and approximate location. Choosing Google sign-in or visiting Stripe may involve those providers’ session and security mechanisms.

6. Managing storage

You can delete cookies and localStorage through your browser’s website-data settings. This may sign you out or remove your language preference. Blocking authentication cookies can prevent use of the dashboard. Public pages can be browsed without an account.