Legal
Cookie Policy
Last updated: 2026-09-08
1. What "cookies and similar storage" means
"Cookies" here means HTTP cookies and any equivalent browser storage (localStorage,
sessionStorage, IndexedDB), plus pixels, SDKs, and trackers. We use both HTTP cookies
(mostly set by our payment provider PayPal during checkout) and one piece of
localStorage to remember your cookie choice.
2. Legal basis and framework
Cookie use on this site follows:
- GDPR (Regulation (EU) 2016/679), in particular Art. 6(1)(a) (consent) and Art. 6(1)(b) (contract).
- ePrivacy Directive (2002/58/EC) Art. 5(3) — prior consent for storage of information on terminal equipment.
- Polish Telecommunications Act (Ustawa Prawo telekomunikacyjne) Art. 173 — implementation of ePrivacy into Polish law.
- Polish Personal Data Protection Act (Ustawa o ochronie danych osobowych).
The short version: cookies that are strictly necessary for the service to work (e.g. keeping a payment session alive) are used without your consent. Anything else (analytics, marketing) requires your consent first.
3. Cookies and similar storage we use
| Name / type | Provider | Purpose | Category | Lifetime |
|---|---|---|---|---|
ts / enforce_policy / x-csrf-token etc. | PayPal | Anti-fraud, CSRF protection, payment session integrity. | Essential (Art. 6(1)(b) GDPR / ePrivacy Art. 5(3) exemption) | Session to a few hours |
submitkit_consent_v1 (localStorage) | SubmitKit | Stores your cookie-banner choice so we don't ask on every page. Not a tracking cookie — it only holds your decision. | Essential (functional) | 12 months or until you clear site data |
Vercel Analytics _vcel + edge headers | Vercel Inc. | Anonymous, aggregate pageview + event counts. No persistent cross-site identifier. Vercel Analytics operates without persistent cookies; the optional identifier is per-session, rotated. | Analytics — opt-in (Art. 6(1)(a) GDPR) | Session; aggregate data 30–90 days at Vercel side |
PayPal's cookies may load during checkout even if you have chosen "Essential only" on our banner. PayPal cookies are necessary for the payment to complete; we do not control them. Their full cookie list lives in PayPal's cookie statement linked from PayPal's checkout pages.
4. What we do NOT use
- No marketing cookies (Meta, LinkedIn, X, TikTok, Google Ads, Bing Ads, Taboola, Outbrain, etc.).
- No third-party retargeting pixels.
- No session-replay tools (FullStory, Hotjar, LogRocket, etc.).
- No advertising or attribution SDKs.
- No fingerprinting beyond what Vercel Analytics does server-side, and only after consent.
- No cookie syncing, no cross-site profile building, no data brokers.
5. Your controls (opt-out as easy as opt-in)
- In the banner: choose "Essential only" or "Accept all" when you first visit.
- Change later: clear your browser's site data for https://submitkit.online (the banner returns on next visit). Or email hi@zordonintelligence.pl and we apply the change server-side within 7 days.
- Browser controls: every modern browser lets you block or delete cookies. Check your browser's privacy settings.
- Vercel Analytics globally: Vercel's opt-out is documented in their privacy policy.
6. How long we keep your choice
Your consent choice is stored in localStorage under
submitkit_consent_v1 for 12 months or until you clear
browser data, whichever comes first. After that, we will ask you again. (Under ePrivacy
Art. 5(3), consent should be renewed at appropriate intervals — 12 months is our chosen
interval.)
7. Your rights in relation to cookies
See our Privacy Policy for full GDPR rights (access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and the right to complain to PUODO).
8. Changes to this policy
We may update this policy; material changes will be announced on this page with a new "Last updated" date. Continued use of SubmitKit after changes means you accept the updated policy.
9. Contact
Questions about cookies? Write to hi@zordonintelligence.pl.