Cookie Policy

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently and to provide information to the website owners.

This Cookie Policy explains what cookies we use, why we use them, and how you can manage your cookie preferences when using Rezme ("we", "us", "our").

We use the following categories of cookies:

Strictly Necessary Cookies: These cookies are essential for the website to function properly. They cannot be disabled. They include:

• Authentication tokens — to keep you signed in securely
• Session management — to maintain your active session
• Security tokens (CSRF protection) — to protect against cross-site request forgery
• Cookie consent preferences — to remember your cookie choices
• Theme and language preferences — to display the site according to your settings. The language choice is also stored in a first-party cookie named rezme_lang (language only, no identifier) so our server can send you to the page in your language (English or Polish) before it loads

These cookies do not collect personal data for marketing purposes and are exempt from the consent requirement under Art. 399(3)(2) of the Polish Electronic Communications Law (implementing Art. 5(3) of the ePrivacy Directive).

With your explicit consent (Art. 399(1)(1) of the Polish Electronic Communications Law, after being informed about the purposes below), we may use the following:

PostHog (Product Analytics):

• Purpose: Understanding how the Service is used (page views, clicks on buttons and links, sign-up and conversion funnels) and improving it
• Data collected: Pseudonymous identifier, device and browser data, IP address, pages visited and events; we do not record sessions (no session replay)
• Storage: an identifier and session data in your browser's localStorage and in a first-party cookie, both named "ph_<project key>_posthog"
• Provider: PostHog, Inc. (United States); data is hosted in the EU (eu.i.posthog.com)
• Retention of the cookie: up to 1 year

Sentry (Error Tracking):

• Purpose: Captures JavaScript errors and performance issues to help us fix bugs
• Data collected: Error stack traces, browser type, page URL (no personal identifiers); when an error occurs, a short replay of the moments before it, with all text and form fields masked and media blocked (no routine session recording)
• Provider: Functional Software, Inc.
• Retention: 90 days

Web Vitals (Performance Monitoring):

• Purpose: Measures page load times and interaction responsiveness
• Data collected: Anonymized performance metrics (LCP, FID, CLS)
• No cookies are set; data is collected via JavaScript APIs

These are only activated when you click "Accept All" or enable "Analytics Cookies" under "Manage preferences". If you click "Reject Non-Essential", they are not loaded.

Stripe (Payment Processing): When you interact with our payment features (checkout, billing portal), Stripe may set cookies for:

• Fraud detection and prevention
• Payment session management
• Device fingerprinting for security

These cookies are strictly necessary for payment security and are set by Stripe, Inc. (https://stripe.com/privacy). We do not control these cookies.

Cloudflare Turnstile (bot protection): On the sign-up, password reset, e-mail verification and waitlist forms a Cloudflare script is loaded that may store or read information in your browser used solely to tell humans from bots. This is strictly necessary for the secure delivery of the service you request (Art. 399(3)(2) of the Polish Electronic Communications Law) and does not require consent. The script is not loaded on other pages.

Google OAuth (Sign-In): The Google sign-in script is loaded only on the sign-in and registration pages. Google may read its own cookies from the accounts.google.com domain and set temporary cookies during the authentication flow. These are governed by Google's Privacy Policy (https://policies.google.com/privacy).

Embedded content (YouTube, Instagram, TikTok): Some blog posts contain videos or posts from these providers. Until you click "Load content" for an item, no request is made to the provider and no cookies are set. After you click, the provider may set its own cookies and receives your IP address; YouTube is loaded from youtube-nocookie.com. We do not remember your choice. See the Privacy Policy (Section 5).

We do NOT use:

• Marketing or advertising cookies
• Social media tracking pixels
• Other third-party analytics cookies (e.g., Google Analytics) beyond PostHog and Sentry described above

You can manage your cookie preferences in several ways:

Cookie Consent Banner: When you first visit our site, a cookie consent banner allows you to:

• Accept All — enables all cookies including analytics
• Reject Non-Essential — allows only essential cookies
• Manage preferences — granular control over each category

You can change your preferences at any time by clicking "Cookie Preferences" in the website footer.

Browser Settings: Most browsers allow you to control cookies through their settings. You can:

• Block all cookies
• Delete existing cookies
• Allow cookies from specific sites only
• Set your browser to notify you when a cookie is set

Please note that blocking strictly necessary cookies may prevent the website from functioning correctly (e.g., you may not be able to stay signed in).

Our cookies have the following retention periods:

• Authentication tokens: Cleared on sign-out; access tokens expire after 15 minutes
• Refresh tokens: 7 days (rotated on each use)
• Cookie consent preferences: 1 year
• Theme/language preferences: Persistent (localStorage, no expiry)
• Language cookie (rezme_lang): 1 year
• PostHog identifier cookie: up to 1 year
• Sentry error data: 90 days (server-side)

Third-party cookie retention is governed by the respective provider's policies.

We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our data practices. We will post the updated policy on this page and update the "Last updated" date.

Material changes will be communicated via a notice on our website.

If you have questions about our use of cookies, please contact us:

Email: privacy@rezme.dev Website: https://rezme.dev

For general data protection inquiries, please refer to our Privacy Policy or contact us at: privacy@rezme.dev