Cookie policy

Essential cookies

Sign-in, customer accounts and form protection require these cookies, so consent is not required under Section 89(3) of the Czech Electronic Communications Act. They are stored when you use the relevant feature.

sb-…-auth-token (Supabase) keeps you signed in to the customer app. It lasts until sign-out, for up to 400 days.

organization_id remembers which customer account you are using. It lasts until you close the browser.

google_oauth_state protects the Google connection against forgery. It lasts 10 minutes.

wewriteback-analytics-consent in browser storage remembers your analytics choice until you change it.

Vercel BotID protects the Get started form against bots. It may use short-lived security data in the browser for verification.

Analytics, only with consent

If you allow analytics, we use Google Analytics 4 for usage statistics on public website pages. We measure which pages you visit, where you come from, how you use pages (such as scrolling, clicking links to other websites and submitting a form without its contents), your device and browser, and approximate location derived from your IP address. Google Analytics does not store IP addresses. We do not measure the customer app, sign-in or invitations.

_ga and _ga_<measurement ID> (Google) distinguish visitors and visits using a random identifier. They last 2 years after the last visit unless you withdraw consent sooner.

We do not link this data to Google accounts or use it for advertising or personalized ads.

The legal basis is your consent under Section 89(3) of the Czech Electronic Communications Act and Article 6(1)(a) GDPR. Google Analytics does not load without consent.

Who processes the data

Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which acts as our processor. Google LLC in the USA may also process data. Transfers rely on the European Commission's adequacy decision under the EU-US Data Privacy Framework, to which Google LLC is certified, and standard contractual clauses. Google's privacy policy at policies.google.com/privacy describes how it handles data.

Retention

Google Analytics is configured to retain event and user data for two months, without resetting retention on new activity. Aggregate statistics without identifiers may remain longer.

Changing or withdrawing consent

Consent is voluntary; the site works the same without it. Change your choice at any time using Cookie settings in the footer or below the demo account. After withdrawal, we immediately turn off measurement and delete _ga cookies. This does not affect processing before withdrawal. You can also delete or block cookies in your browser settings.

Further information

The Privacy policy explains how we process other personal data and describes your rights. You may complain to the Czech Office for Personal Data Protection at uoou.gov.cz.