Cookie Policy
Last updated: 3 July 2026 · Draft for legal review — not yet in force
First draft under the ePrivacy opt-in regime. Not legal advice. Keep the table in sync with the trackers actually deployed.
1. What cookies are
Cookies and similar technologies (localStorage, SDK identifiers, pixels) store or read information on your device. Some are needed to run Gardlio; others are used only with your consent.
2. Consent
Essential cookies run automatically because the service cannot work without them. All other categories — functional, statistics/analytics, marketing — run only after you give prior, active opt-in consent through our cookie banner. You can change or withdraw consent at any time via Cookie settings. Leaving default browser settings is not consent.
3. Categories and the tools we use
| Category | Consent? | What it does | Tools (examples) | Retention |
|---|---|---|---|---|
| Essential | No — always on | Login/session, security, load balancing, saving your consent choice | Supabase auth session tokens (sb-…); the cookie-consent record (gh-consent); the language preference (gh-lang) | Session for auth tokens; 12 months for the stored consent choice and language preference |
| Functional | Opt-in | Remember preferences (e.g. language) | None currently in use | — |
| Statistics | Opt-in | Measure usage to improve the product | None currently in use | ≤ 13 months |
| Marketing | Opt-in | Measure/limit ads, remarketing | None currently in use | ≤ 13 months |
*At launch, Gardlio uses only essential cookies: no functional, analytics/statistics or marketing trackers are currently in use. The consent framework is in place and ready for when analytics is added.*
4. Managing cookies
Change your choices in Cookie settings, or in your browser settings. Blocking essential cookies may break the service.
Country-specific annex — ePrivacy transposition
| Statute | Note | |
|---|---|---|
| 🇨🇿 Czech Republic | Electronic Communications Act §89(3) | Opt-in since 1 Jan 2022 |
| 🇩🇪 Germany | TDDDG §25 (ex-TTDSG) | Prior consent for non-essential storage/access |
| 🇦🇹 Austria | TKG §165 | Prior consent for non-essential storage/access |
| 🇵🇱 Poland | Prawo Komunikacji Elektronicznej, Arts. 399 & 402 | In force 10 Nov 2024; consent = GDPR standard, browser-default is not consent |