Cookie & Tracking Technologies Policy of Woobsy.com
Version 4.2 • Effective Date: September 17, 2026 • Governing Law: EU ePrivacy Directive (2002/58/EC), GDPR (2016/679), Polish Electronic Communications Law (PKE art. 398-400), EDPB Guidelines 05/2020
1. Introduction & Fundamental Principles
1.1. This Policy explains how Woobsy.com utilizes cookies, browser LocalStorage, SessionStorage, and tracking tokens in compliance with European Directive 2002/58/EC (ePrivacy Directive), Regulation (EU) 2016/679 (GDPR), and the Polish Electronic Communications Law (Prawo komunikacji elektronicznej - PKE).
1.2. Zero Non-Essential Trackers Without Explicit Consent: All non-essential telemetry, performance, and commercial trackers remain strictly blocked until you explicitly grant consent via our interactive Cookie Banner.
2. Three-Tier Tracker Taxonomy
2.1. Tier 1: Strictly Necessary (Art. 398 PKE / ePrivacy Art. 5(3)) - Essential for authentication, CSRF security, Cloudflare bot defense, and theme/language preferences. Always active; exempt from consent under statutory necessity.
2.2. Tier 2: Telemetry & Performance (GDPR Art. 6(1)(a)) - PostHog EU cookieless usage analytics (aggregated pageviews, click latency). Operates strictly in memory; persistent cookies activated only upon consent.
2.3. Tier 3: Commercial Affiliate Attribution (GDPR Art. 6(1)(a) / ePrivacy) - Cryptographic outbound referral tags enabling partner merchants (Amazon, eBay, AliExpress, Awin, CJ) to credit referral conversions at zero extra cost to the user.
Essential for authentication, CSRF security, Cloudflare bot defense, and theme/language preferences. Always active; exempt from consent under statutory necessity.
PostHog EU cookieless usage analytics (aggregated pageviews, click latency). Operates strictly in memory; persistent cookies activated only upon consent.
Cryptographic outbound referral tags enabling partner merchants (Amazon, eBay, AliExpress, Awin, CJ) to credit conversions at zero extra cost to the user.
3. Exhaustive Technical Tracker Inventory
3.1. Below is an exhaustive list of all storage keys, cookies, and local storage tokens deployed on Woobsy.com:
3.2. All storage items are strictly categorized according to statutory necessity and data retention schedules.
| Storage Key | Provider | Storage Engine | Duration | Statutory Purpose & Category |
|---|---|---|---|---|
| sb-*-auth-token | Supabase Inc. | LocalStorage | Session / 1 Year | Strictly Necessary: Uwierzytelnianie użytkownika i bezpieczne przechowywanie tokenów sesji JWT. |
| cf_clearance | Cloudflare Inc. | HTTP Cookie | Up to 30 Days | Strictly Necessary: Potwierdzenie pomyślnej weryfikacji Cloudflare Turnstile i obrona przed botami. |
| __cf_bm | Cloudflare Inc. | HTTP Cookie | 30 Minutes | Strictly Necessary: Zaawansowane ograniczanie częstotliwości zapytań (rate-limiting) i mitygacja DDoS. |
| nancat_theme | Woobsy.com | LocalStorage | Persistent | Strictly Necessary: Zapamiętanie preferencji motywu wizualnego (tryb ciemny / jasny Neumorphic). |
| nancat_lang | Woobsy.com | LocalStorage | Persistent | Strictly Necessary: Zapamiętanie wybranego języka interfejsu (7 oficjalnych języków platformy). |
| ph_phc_* | PostHog EU | Memory / Cookie | 1 Year (if consented) | Performance & Telemetry: Anonimowa telemetria zachowań. Działa w pamięci ulotnej do momentu zgody. |
| woobsy_consent | Woobsy.com | LocalStorage | 12 Months | Consent Record: Przechowywanie granularnych wyborów użytkownika dotyczących plików cookies. |
4. Commercial Affiliate Attribution Trackers
4.1. When you click an external merchant offer, a referral identifier is passed to the merchant platform (e.g., Amazon, eBay, AliExpress).
4.2. The merchant may place a 24-hour to 30-day tracking cookie in your browser on their domain to credit Woobsy for the referral.
4.3. Woobsy does NOT set cross-site third-party tracking cookies on your device during internal platform search.
5. Global Privacy Control (GPC) & Do Not Track (DNT) Signals
5.1. Automated GPC Compliance: Woobsy programmatically detects and honors the Global Privacy Control (GPC) signal transmitted via the Sec-GPC: 1 HTTP header and the browser navigator.globalPrivacyControl JavaScript property.
5.2. When a valid GPC signal is identified, all non-essential telemetry and affiliate tracking cookies are automatically disabled without requiring manual banner interaction.
Woobsy programmatically detects and honors the Global Privacy Control (GPC) signal transmitted via the Sec-GPC: 1 HTTP header and the browser navigator.globalPrivacyControl JavaScript property. When a valid GPC signal is identified, all non-essential telemetry and affiliate tracking cookies are automatically disabled without requiring manual banner interaction.
6. Browser-Level Cookie Management & Opt-Out Guides
6.1. You can block or delete cookies directly in your browser settings at any time.
6.2. Guides for major browsers: Google Chrome (Settings > Privacy and security), Apple Safari (Preferences > Privacy), Mozilla Firefox (Settings > Privacy & Security), Microsoft Edge (Settings > Cookies and site permissions).
7. Interactive Consent Management & Revocation Desk
7.1. Pursuant to GDPR Article 7(3), withdrawing consent must be as easy as granting it.
7.2. You can review, modify, or immediately revoke your cookie preferences at any time by clicking the preference button below or contacting privacy@woobsy.com.