Cookie policy
Information about cookies and similar technologies used on the TreffikAI website.
1. What are cookies
Cookies are small text files that your browser stores on your device when you visit a website. They help the site remember your preferences and understand how you interact with it. Some cookies are essential; others are only placed after you give your consent.
2. Data controller
The controller responsible for the processing of personal data via cookies is TreffikAI, operating the website treffikai.com (hereafter: "we", "us"). Contact: privacy@treffikai.com.
3. Legal basis
| Category | Legal basis (GDPR) |
|---|---|
| Necessary | Art. 6(1)(f) — legitimate interest (essential site operation) |
| Analytics | Art. 6(1)(a) — consent |
| Marketing | Art. 6(1)(a) — consent |
We also comply with the ePrivacy Directive (2002/58/EC) and the Polish Telecommunications Act (Prawo telekomunikacyjne) regarding cookie storage on end-user devices.
4. Cookie categories
4.1 Necessary (always active)
These cookies are required for the website to function. They cannot be disabled.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
cookie_consent | Stores your cookie consent choices (categories, version, timestamp) | 365 days | First-party |
NEXT_LOCALE | Remembers your language preference (EN / PL) | Session | First-party |
4.2 Analytics (consent required)
Placed only after you grant consent. They help us understand how visitors use the site in an anonymised way.
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
_ga | Distinguishes unique users for Google Analytics | 2 years | |
_ga_* | Maintains session state for Google Analytics | 2 years |
Google Consent Mode v2: analytics cookies map to analytics_storage. When denied, Google collects no cookie-based data — only cookieless pings may be sent.
4.3 Marketing (consent required)
Placed only after you grant consent. They enable personalised advertising and campaign measurement.
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
Various doubleclick.net cookies | Ad targeting and frequency capping | Up to 2 years | Google Ads |
__gads, __gpi | Serve ads via Google AdSense | Up to 2 years |
Google Consent Mode v2: marketing cookies map to ad_storage, ad_user_data, and ad_personalization. When denied, no personalised ads are served or personal data shared with ad networks.
5. How we obtain consent
When you first visit the site, a cookie banner appears at the bottom of the page. You have three equal options:
- Accept all — enables analytics and marketing cookies.
- Reject — only necessary cookies remain active.
- Settings — choose per category (analytics and/or marketing).
No non-essential cookies are placed before you make a choice. The Accept and Reject buttons have equal visual prominence in accordance with EDPB and CNIL guidelines.
6. Managing and withdrawing consent
You may change or withdraw your consent at any time by:
- Clicking "Manage consents" in the website footer — this reopens the cookie banner.
- Clearing cookies through your browser settings.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).
When you update your consent, we immediately send a consent update signal via Google Consent Mode v2, and the relevant cookies are no longer refreshed (they expire naturally).
7. What we store in the consent cookie
The cookie_consent cookie contains the following JSON payload:
{
"analytics": true,
"marketing": false,
"v": 1,
"t": 1713538800000
}analytics/marketing— your choices per category.v— policy version number. If we update this policy in a material way, the version is incremented and you will be re-prompted.t— Unix timestamp of when consent was given (used for audit purposes under Art. 7(1) GDPR).
8. Third-party recipients
When you grant consent, data may be shared with the following third-party processors:
| Processor | Purpose | Privacy policy |
|---|---|---|
| Google LLC | Analytics (Google Analytics), advertising (Google Ads / AdSense) | policies.google.com/privacy |
| Resend Inc. | Newsletter delivery (email address only — no cookie data) | resend.com/legal/privacy-policy |
Data transfers to processors outside the EEA are covered by Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework, as applicable.
9. Retention
- Necessary cookies: session-length or up to 365 days (consent cookie).
- Analytics cookies: up to 2 years (set by Google).
- Marketing cookies: up to 2 years (set by Google).
You can delete all cookies at any time through your browser settings.
10. Your rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15).
- Rectify inaccurate data (Art. 16).
- Erase data ("right to be forgotten") (Art. 17).
- Restrict processing (Art. 18).
- Object to processing (Art. 21).
- Data portability (Art. 20).
- Withdraw consent at any time without affecting the lawfulness of processing done prior to withdrawal (Art. 7(3)).
- Lodge a complaint with the Polish Data Protection Authority (UODO, uodo.gov.pl).
To exercise your rights, contact us at privacy@treffikai.com.
11. Browser-level controls
Most browsers allow you to block or delete cookies. Note that blocking necessary cookies may prevent parts of the site from working correctly.
12. Changes to this policy
We may update this cookie policy from time to time. The date of the last revision is shown at the top of this page. Material changes will trigger a consent version bump — you will be asked to reconsent.
13. Contact
If you have questions about our use of cookies, please contact us at privacy@treffikai.com.
For general data protection matters, see our Privacy policy.