Polityka ciasteczek — pakietochronny.pl

Cookie policy

This policy describes what the pakietochronny.pl portal stores on a visitor's device and what leaves the browser along the way. Every item is named so that you can verify it in your browser's developer tools instead of taking our word for it.

The service is operated by UNIKOM S.C. Krzysztof Rojek, ul. Towarowa 2c, 43-100 Tychy, Poland, VAT ID 646-283-18-04.

Two categories, and only two

Essential items always work. Without them the site cannot do the thing you came for, so we do not ask for consent to them — a question you cannot answer with "no" is not a question.

Analytics are OFF by default. They start only after you agree and stop the moment you withdraw. Until then the measurement tool does not start at all; it is not a matter of collecting data and discarding it afterwards.

We run no marketing or advertising category, because we have nothing to put in it. A category with nothing behind it would be a lie in a settings window.

Essential — the full list

• mp_zgoda_ciasteczek (cookie, 12 months) — the decision made in the consent window together with the version number of the policy shown at that moment.
• mp_jezyk (cookie, 12 months) — the language you chose. Written when you click a flag and also before you are sent to the payment page, so that you come back in the same language.
• mp-jezyk (browser storage) — the same choice for screens loaded without a connection.
• mp-chunk-reload-at (tab storage, until the tab is closed) — a safety catch after a new release of the site: it allows one refresh per minute.

The plan portal keeps no session of its own: a plan is checked once by IMEI, and a signing link is single-use and expires.

Protection of the plan lookup

The screen that checks a plan by IMEI is protected by Cloudflare Turnstile, a mechanism that tells a person apart from a program sending bulk queries. It is loaded as a script and a frame from challenges.cloudflare.com, and Cloudflare sees your network address and browser type in the process. Any storage Turnstile creates lives inside its own frame.

We do not file this under analytics, because that would not be true: without it the plan lookup stops working, so it cannot be switched off without losing the service. We list it here because data does reach a third party and you should know it.

Analytics — the full list

We measure with PostHog running on our own server at posthog.myperformance.pl. The data does not go to an outside analytics company.

Once you agree, your browser receives:

• ph_KEY_posthog (browser storage, until consent is withdrawn) — a randomly assigned device and session identifier, plus how you reached the site.
• ph_KEY_session_registered_properties (browser storage, until consent is withdrawn) — properties of the current session.
• ph_KEY_window_id and ph_KEY_primary_window_exists (tab storage, until the tab is closed) — which window the visit is happening in.
• __ph_opt_in_out_KEY (browser storage, until consent is withdrawn) — the tool's own record of your measurement decision.

Our measurement server receives: the address of the page you opened, the time, your browser and device type, your language setting and errors the page reported. The server sees your network address, as any server does on any internet connection.

What the measurement does NOT do, although the tool is capable of it: it does not record your screen, does not log clicks or pointer movement, builds no heat maps and creates no personal profile.

Traces that are not cookies

• Language choice. When you click a flag we record the bare fact: which language, from which one, on what kind of screen. The row carries no person identifier, no network address and no plan number.
• Buying and renewing a plan. Both take you to Stripe. Stripe's cookies live on Stripe's domain and are covered by Stripe's policy.
• Fonts and scripts are served from our own server, with the exception of Turnstile described above.

How to change your mind

Withdrawing consent is exactly as easy as giving it and takes effect at once: measurement stops and the ph_ and __ph_opt_in_out_ keys listed above are deleted from your browser. What remains is nothing — not a "we are not collecting" flag next to a running counter.

Cookie settings stay reachable from every page at any time, not only on your first visit.

When we will ask again

Your decision is stored together with the version number of this policy. When we publish a new version we ask again — consent covers the text we showed you at the time, not text written afterwards. Correcting the translation does not change the version number and does not trigger a new question, because the binding wording stays the same.

If the site cannot read the current policy version, measurement stays off and the choice is shown anyway. Silence never means "yes".

What we store about the consent itself

After every decision we store in our database: the date and time, the chosen category, the number and language of the policy shown, the site the decision was made on, and how it was made (the entry window, the settings, or a repeat question after a policy change). The record contains no network address, no browser header, no case number and no other handle on a particular person: it exists to show HOW and ABOUT WHAT we asked on a given day. What a particular browser chose is carried by the mp_zgoda_ciasteczek cookie on the device itself.

A withdrawal is stored as a separate event rather than by deleting the earlier one — otherwise the proof that a withdrawal happened would disappear with it. Rows are deleted after 24 months.