CoinTrack Cookie and Similar Technologies Policy
- Version:
- 1.0
- Effective from:
This is an English translation of the Polish „Polityka cookies i podobnych technologii CoinTrack”. The Polish version is binding; in case of any discrepancy, the Polish version prevails.
1. What this policy covers
We describe what information we store on your device and what we read from it when you use the website https://www.cointrack.pl and the CoinTrack app - in the browser or installed on your device’s home screen (PWA). This covers not only cookies but also browser storage (localStorage, sessionStorage, IndexedDB, Cache Storage) and a script running in the background of the browser (a service worker). The data controller is Mikołaj Zienkowicz - details in the Privacy Policy.
2. The principle
- Strictly necessary technologies - for sign-in, security, remembering your settings and running features you knowingly use - are used without consent, because they are necessary to provide the service you request (Article 399(3) of the Polish Electronic Communications Law).
- Analytics runs only with your consent. Until you consent, the PostHog script does not load at all and stores nothing.
- You can accept everything, reject everything or choose categories. The “Accept” and “Reject” buttons are equally visible. Refusing does not limit any CoinTrack feature.
- You can change or withdraw consent at any time: the “Cookie settings” link in the website footer or Settings → Privacy in the app. Withdrawing is as easy as giving consent.
- We remember your choice for 12 months. After that - or when we add a new tool or a new provider, a new purpose or a new category - we will ask again. We announce on this page when we add an auxiliary storage item in the same category, for the same purpose and with the same provider.
3. List of technologies
3.1. Strictly necessary (no consent)
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
__Secure-neon-auth.session_token | CoinTrack (Neon Auth) | cookie, HttpOnly, Secure | keeping you signed in | until you sign out or the session expires |
__Secure-neon-auth.local.session_data | CoinTrack (Neon Auth) | cookie, HttpOnly, Secure | a short-lived copy of the session data, so sign-in is not checked on every click | until you sign out or the session expires |
__Secure-neon-auth.session_challenge | CoinTrack (Neon Auth) | cookie, HttpOnly, Secure | security of signing in with Google and with an e-mail link | 10 minutes |
NEXT_LOCALE | CoinTrack | cookie | remembering the language | until the browser is closed |
ct_consent | CoinTrack | cookie | remembering your banner choices (and the banner version) | 12 months |
theme | CoinTrack | cookie | light/dark theme | 1 year |
selectedFamilyId | CoinTrack | cookie | remembering the selected Family | until the browser is closed |
shouldShowTour | CoinTrack | localStorage | remembering whether to show the tour | until you delete it |
legal-changes-banner-dismissed:<documents and versions> | CoinTrack | localStorage | remembering that you closed, on this device, the banner about changes to the Terms, the Pricing or the Privacy Policy | until you delete it; the banner shows again at the next change |
cointrack-offline-pages-v1, cointrack-offline-assets-v1 | CoinTrack | Cache Storage | offline mode: the last fetched pages of the Dashboard and of the current month’s Budget, with the date and time they were fetched, and the app files needed to open them | until the page is fetched again, and we delete a copy older than 30 days; at most until you switch offline mode off (Settings), sign out or delete the site data, or we switch offline mode off; also until you switch the Family or open the app after the session has expired |
cointrack-offline | CoinTrack | IndexedDB | offline mode: expenses and income saved without internet, waiting to be sent | until the entry is sent; at most until you switch offline mode off (Settings), sign out or delete the site data, or we switch offline mode off; also until you switch the Family or open the app after the session has expired |
cointrack-offline-scope | CoinTrack | localStorage | offline mode: whose data is stored on the device (the Account’s pseudonym and the Family), so that it is not shown to another person or in another Family | until you switch offline mode off (Settings), sign out or delete the site data, or we switch offline mode off; also until you switch the Family or open the app after the session has expired |
cointrack-offline-enabled | CoinTrack | localStorage | offline mode: remembering that you switched offline mode on on this device (Settings → "Offline mode on this device") | until you switch offline mode off (Settings) or delete the site data, or we switch offline mode off |
offline-worker.js | CoinTrack | service worker | offline mode: stores and reads the pages and files in the rows above when there is no internet; we start it only once you switch offline mode on | until you switch offline mode off (Settings), sign out or delete the site data, or we switch offline mode off |
| Przelewy24 payment page and card form | PayPro S.A. (Przelewy24) | cookie / browser storage - on the Przelewy24 payment page (secure.przelewy24.pl) or in Przelewy24 elements embedded in our checkout page | carrying out the payment, payment security, fraud prevention - only when you pay | according to PayPro S.A.’s cookie policy |
| none (no cookies and no browser storage) | Vercel Inc. (Speed Insights) | measurement script | website performance measurement (load and response times), not tied to a person; no consent required | not applicable |
We use the offline mode technologies only on a device on which you switch offline mode on yourself (Settings → "Offline mode on this device"; it is off by default, separately on each device), and only when offline mode is available (Privacy Policy, section 15). Storing on and reading from the device are then necessary for the feature you switched on to work, so we do not ask about them in the banner (Article 399(3)(2) of the Polish Electronic Communications Law). They hold the Budget data you see on the Dashboard and in the Budget, and the entries saved without internet. We do not send them anywhere other than our server. Switching offline mode off, signing out, switching the Family and another person signing in on this device delete this data; we also delete it when the app is opened after the session has expired, and page copies older than 30 days without you doing anything.
You pay for a Plan on the Przelewy24 payment page (secure.przelewy24.pl), to which CoinTrack redirects you, or in the Przelewy24 card form embedded in our checkout page. Card details go directly to Przelewy24, not to us. The Przelewy24 page and form may set their own cookies and browser storage that are necessary to carry out the payment and prevent fraud - so they need no consent (section 2(1)). PayPro S.A. is responsible for them under its cookie policy; under that policy, PayPro uses cookies other than necessary ones only with your consent.
3.2. Analytics (only with consent)
| Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
ph_<project key>_posthog | PostHog Inc. (EU Cloud, Frankfurt) | cookie and localStorage | usage statistics for the website and app (page views, clicks, sign-up and purchase funnel) - without amounts, transaction descriptions or chat content | 1 year |
ct_analytics_payment | CoinTrack | sessionStorage | remembering what a payment in progress is for (payment identifier, kind, Plan, period), so that a started Plan can be counted in the statistics after you return from the payment - without amounts or payment details; the payment identifier stays in the browser and does not reach PostHog | until the browser tab is closed; deleted when you withdraw consent |
Session recording (session replay) is switched off.
3.3. Marketing
We currently use no marketing cookies or pixels (e.g. Meta Pixel, Google Ads). If that changes, we will add them here and ask for consent again.
4. How to delete data from your device
You can delete cookies and site data in your browser settings (e.g. Chrome: Settings → Privacy and security → Third-party cookies / Site data). Deleting strictly necessary data will sign you out and restore the default settings (language, theme). Data saved in your Account, including the AI Assistant conversation history, stays. Deleting the site data also deletes offline mode entries that were waiting to be sent - they do not reach the budget. Switching offline mode off in Settings and signing out also delete the offline mode data.
5. Changes
We announce changes to the list of tools on this page and - if a new consent is needed (section 2(5)) - show the banner again.