DRAFT – legal review required
This document is a draft and has not yet been reviewed by a lawyer. The text may change before the paid service launches. The Polish version prevails.
Cookie Policy
KaiLedger uses only cookies strictly necessary for the service. There are no analytics or advertising cookies.
- Version:
- 2026-10-18-draft
- Date:
1. What cookies are
Cookies are small text files that your browser stores on your device. The browser's local storage works similarly. This policy covers both.
The controller is [Operator: company name, registered address, NIP]. Contact: [privacy email address].
2. Which cookies we use
We use only cookies and local storage strictly necessary to provide the service you ask for (sign-in, company selection, language, theme). No consent is required to store them (Article 399(3) of the Polish Electronic Communications Law of 12 July 2024, Article 5(3) of Directive 2002/58/EC), so we show no consent banner.
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| sb-[project]-auth-token (may be split into parts .0, .1…) | Signed-in User session (Supabase Auth) | Until sign-out; token refreshed automatically | First-party, strictly necessary |
| sb-[project]-auth-token-code-verifier | Protects sign-in by email link (PKCE) | During sign-in | First-party, strictly necessary |
| kl-org | Remembers the selected company when you have access to several | 1 year | First-party, strictly necessary |
| kl-view-as | Viewing the app as another User (account owner only) | Until the preview ends, max. 2 hours | First-party, strictly necessary |
| kl-lang | Chosen language of the public pages (Polish / English) | 1 year | First-party, strictly necessary (functional) |
| theme (localStorage) | Chosen light / dark theme | Until browser data is cleared | Local storage, strictly necessary (functional) |
| Application cache (service worker) | Offline page and static files of the installable app (PWA); no financial data | Until the app updates or is removed | Browser storage, strictly necessary |
3. What we do not use
We do not use analytics, marketing, advertising or tracking cookies, including tools such as Google Analytics or social media pixels. We do not profile Users.
If we ever want to use cookies that need consent, we will first update this policy and ask for your consent.
4. Payment pages
Subscription payments take place on Stripe's pages (card or BLIK). On those pages Stripe may use its own cookies, e.g. for fraud prevention. See Stripe's privacy and cookie policy (stripe.com/privacy).
5. Managing cookies
You can delete or block cookies in your browser settings. Blocking strictly necessary cookies prevents signing in and using the application; the public pages still work, but without remembering your language.
6. Changes
We announce changes to this policy in the service. The version and date are shown at the top of the page. More about personal data: Privacy Policy (/legal/privacy). The Polish version prevails.