Legal

Cookie Policy

What cookies and similar technologies this website uses, what they do, how long they last, and how you can control them.

1.1. What cookies and similar technologies are

Cookies are small text files that a website asks your browser to store on your device. On each later request the browser sends them back, which lets the site recognise your session, remember choices and measure usage. Similar technologies include localStorage and sessionStorage (key-value storage in the browser) and pixels or beacons embedded in pages.

First-party cookies are set by kapusta.dev; third-party cookies are set by an external provider whose resource is loaded on the page. Session cookies disappear when you close the browser; persistent cookies stay until they expire or you delete them.

2.2. Legal basis for using them

Strictly necessary cookies are used on the basis of Article 173(3) of the Polish Telecommunications Act and Art. 6(1)(f) GDPR, because the website cannot function without them. All other categories — analytics and any future marketing technologies — are used only with your consent under Art. 6(1)(a) GDPR, which you may withdraw at any time.

3.3. Categories we use

The website is deliberately light on tracking. The categories below describe everything we use today:

  • Strictly necessary — routing and session continuity, form submission protection, load balancing and the authenticated administrator session (including two-factor verification). Cannot be switched off; the site and its forms do not work without them.
  • Preferences — your chosen language, stored in localStorage under a language key, so that PL, RU, UA or EN loads automatically on your next visit. Kept until you clear site data.
  • Analytics (consent-based) — aggregated statistics such as page views, referrers, device type, approximate country and page performance. Data is aggregated and not used to identify you.
  • Security and abuse prevention — short-lived records of failed login attempts and rate limiting, used only for the admin area.
  • Marketing — none. We do not run advertising pixels or cross-site retargeting on this website. If that ever changes, this policy will be updated and consent will be requested first.

4.4. Typical storage periods

Session and routing cookies expire when you close the browser or after a few hours of inactivity. The administrator session expires after a defined idle period and can be revoked from the admin panel. Language preference in localStorage persists until you clear browser data. Analytics identifiers, where used, are short-lived and typically expire within 24 hours to 13 months depending on the provider's settings.

5.5. Third-party technologies

Some resources are delivered by external providers, which may set their own cookies or process technical data such as your IP address in order to serve the resource:

  • Web fonts, loaded from a font delivery service to render our typography.
  • Hosting, database and serverless backend providers that run the site and its forms.
  • Privacy-focused website analytics, active only after consent.
  • Messenger and phone links (WhatsApp, Telegram) — no cookie is set until you click and continue in that provider's app, where its own policy applies.
  • Embedded media, if present on a page, may set cookies once you start playback.

6.6. Managing and withdrawing consent

You can change or withdraw consent at any time by clearing site data for kapusta.dev in your browser and choosing different options when asked again.

Every modern browser also lets you block or delete cookies per site: Chrome — Settings › Privacy and security › Third-party cookies; Safari — Settings › Privacy; Firefox — Settings › Privacy & Security; Edge — Settings › Cookies and site permissions. Private or incognito windows discard cookies when closed.

Please note that blocking strictly necessary cookies may break forms, language switching and navigation, and clearing site data resets your saved language preference.

7.7. Do Not Track and Global Privacy Control

We do not use cross-site tracking, so DNT and GPC signals do not change how we handle your data. Where an analytics provider honours these signals, its own behaviour applies.

8.8. Changes and contact

We review this policy whenever we add or remove a tool that stores data in your browser, and at least once a year. The current version and its date are shown on this page.

Questions about cookies: sales@kapusta.dev. For the full picture of how we handle personal data — including your GDPR rights, retention periods and processors — see our Privacy Policy.