Cookie Policy

Last updated: November 15, 2024

1. Introduction

This Cookie Policy explains how HintCraft Spółka z o.o. ("we", "our", or "us") uses cookies and similar technologies on our website and application (collectively, the "Service").

We are committed to protecting your privacy and being transparent about the limited use of cookies on our platform.

Company Details:
HintCraft Spółka z o.o.
ul. Kazimierza Morawskiego 5/127, 30-102 Kraków, Poland
VAT EU: PL6762694168
Email: contact@hintcraft.com

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, or tablet) when you visit a website. They help websites remember your preferences and improve your experience.

Cookies can be:

  • Session cookies - temporary cookies that expire when you close your browser
  • Persistent cookies - cookies that remain on your device for a set period or until you delete them

3. Our Privacy-First Approach

3.1 No Tracking or Marketing Cookies

We do NOT use:

  • Advertising cookies
  • Marketing or retargeting cookies
  • Social media tracking pixels
  • Cross-site tracking cookies
  • Third-party analytics cookies that collect personal data

3.2 Privacy-Friendly Analytics

We use Plausible Analytics, a privacy-focused, cookie-free analytics tool that:

  • Does NOT use cookies
  • Does NOT collect personal data
  • Does NOT track individual users across websites
  • Is fully GDPR compliant
  • Provides anonymized aggregate statistics only

Learn more about Plausible's privacy approach at plausible.io/privacy-focused-web-analytics

4. Essential Cookies We Use

We use a minimal number of strictly necessary cookies required for the Service to function. These cookies are essential for core functionality and do not require consent under GDPR and ePrivacy Directive.

4.1 Authentication Cookies

Purpose: Keep you securely logged in to your account
Provider: Auth.js (formerly NextAuth.js)
Duration: Session cookie (expires when you close your browser) or persistent (if you select "Remember me")
Cookie names: next-auth.session-token, __Secure-next-auth.session-token

These cookies contain an encrypted session identifier and do not store personal information directly.

4.2 Payment Session Cookies

Purpose: Process secure payments and maintain checkout session
Provider: Stripe
Duration: Session cookie (typically 30 minutes)
Cookie names: __stripe_mid, __stripe_sid

These cookies are set only when you initiate a payment and are required for secure transaction processing.

4.3 Preference Cookies

Purpose: Remember your language and interface preferences
Cookie name: NEXT_LOCALE or similar
Duration: 1 year

This helps us display the Service in your preferred language without asking repeatedly.

5. Legal Basis for Cookie Use

Our use of essential cookies is based on:

  • Legitimate interest (Article 6(1)(f) GDPR) - necessary for website functionality and security
  • Contractual necessity (Article 6(1)(b) GDPR) - required to provide the Service you've requested

Since these cookies are strictly necessary, we do not need to obtain your consent before setting them.

6. Managing Cookies

6.1 Browser Settings

You can control and delete cookies through your browser settings:

  • Chrome: Settings > Privacy and security > Cookies and other site data
  • Firefox: Settings > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Cookies and website data
  • Edge: Settings > Cookies and site permissions

Important: Disabling essential cookies will prevent you from logging in and using core features of the Service.

6.2 Impact of Disabling Cookies

If you disable or delete our essential cookies:

  • You will not be able to stay logged in
  • Payment processing will not work
  • Your language preference will not be saved
  • Some features may not function correctly

7. Third-Party Services

While we minimize third-party dependencies, the following services may set cookies when you interact with specific features:

7.1 Stripe (Payment Processing)

When you make a payment, Stripe may set additional cookies for fraud prevention and payment processing. These are covered by Stripe's Cookie Policy.

7.2 External Links

Our Service may contain links to external websites. We are not responsible for the cookie practices of third-party websites. Please review their respective cookie policies.

8. Updates to This Policy

We may update this Cookie Policy to reflect:

  • Changes in our cookie usage
  • New legal requirements
  • Improvements to our Service

When we make significant changes, we will:

  • Update the "Last updated" date at the top of this policy
  • Notify you via email or in-app notification
  • Post a notice on our website

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

9. International Users

9.1 European Economic Area (EEA)

We comply with GDPR and ePrivacy Directive requirements. Our use of essential cookies is lawful under these regulations without requiring consent.

9.2 United Kingdom

We comply with UK GDPR and PECR (Privacy and Electronic Communications Regulations).

9.3 California and Other US States

Our essential cookies are used for functionality purposes and are not subject to opt-out requirements under CCPA or similar state laws.

10. Your Rights

Under GDPR and other privacy laws, you have the right to:

  • Access information about cookies stored on your device
  • Delete cookies through your browser settings
  • Object to processing where applicable
  • Withdraw consent (though not required for essential cookies)
  • File a complaint with your local data protection authority

For more information about your data rights, see our Privacy Policy.

11. Contact Us

If you have questions about our use of cookies or this Cookie Policy, please contact us:

Email: contact@hintcraft.com
Address: HintCraft Spółka z o.o., ul. Kazimierza Morawskiego 5/127, 30-102 Kraków, Poland
Data Protection: For data protection inquiries, email contact@hintcraft.com with "GDPR" in the subject line

12. Additional Resources


Summary: We use only essential cookies required for login, payments, and preferences. We do not track you, sell your data, or use advertising cookies. You have full control over cookies through your browser settings.