Back to the home page

Cookie Policy

In accordance with Art. 399 of the Act of 12 July 2024 – Electronic Communications Law (Prawo komunikacji elektronicznej) and Regulation (EU) 2016/679 (GDPR).

This is a translation provided for convenience only. The Polish version of this document is binding. View the Polish version

Change your cookie preferences

You can review and change your consent at any time.

What cookies are

Cookies are small text files that a website you visit saves on your device and reads on subsequent visits. Browser storage (localStorage, sessionStorage) works in a similar way. This policy describes which cookies and browser storage data the GeoTaktyka service uses, for what purpose, and how you can manage them. All cookies listed below are first-party cookies set on the geotaktyka.pl domain.

Strictly necessary cookies

Necessary for the Platform to work: sign-in, security, remembering your language and your cookie decision. They do not require consent because they are necessary to provide the service you use (Art. 399(3) of the Electronic Communications Law).

Always active

  • __Host-authjs.session-tokenMaintaining the signed-in user’s session (encrypted token, HttpOnly).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Up to 30 days
  • __Host-authjs.csrf-token, __Secure-authjs.callback-urlProtecting sign-in against CSRF attacks and returning to the correct page after signing in.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the browser is closed
  • __Secure-authjs.pkce.code_verifier, __Secure-authjs.stateSecuring the OpenID Connect sign-in flow (PKCE, state, nonce).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: 15 minutes
  • __Secure-authjs.nonceSecuring the OpenID Connect sign-in flow (PKCE, state, nonce).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the browser is closed
  • NEXT_LOCALERemembering the selected language.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: 1 year
  • geotaktyka_anon_idA random identifier under which we record your cookie decision before you sign in (accountability for consent, Art. 7(1) GDPR).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: 1 year
  • geotaktyka_anonA signed (HttpOnly) copy of the above identifier, protecting the consent record against forgery.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: 1 year
  • gt_agency_orgThe organisation last selected in the agency panel, so the right panel opens when you come back. Set only after an organisation member selects an organisation.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: 1 year

On test servers without HTTPS, the names of login cookies do not have the __Host- / __Secure- prefixes.

Sign-in server cookies

Set by our identity server (Keycloak, path /auth) only when you sign in or create an account. They are necessary to carry out sign-in securely and to maintain single sign-on (SSO); they do not require consent.

Always active

  • AUTH_SESSION_IDLinking the successive steps of sign-in or registration to the same sign-in attempt.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the browser is closed
  • KEYCLOAK_IDENTITY, KEYCLOAK_SESSIONSingle sign-on (SSO): recognition of the signed-in user by the identity server (KEYCLOAK_IDENTITY is HttpOnly).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the browser is closed; with “Remember me”, up to 30 days
  • KC_RESTARTResuming an interrupted sign-in (e.g. after the sign-in page expires).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the browser is closed
  • KEYCLOAK_LOCALELanguage of the sign-in pages, if you change it on the sign-in page.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the browser is closed

Browser storage (localStorage and sessionStorage)

We save in your browser’s storage settings and choices you make yourself (e.g. map view, selected city, dismissed notices, form draft). These data remain on your device and are not sent to our servers; they serve only to remember features you request, so they do not require consent.

Always active

  • geotaktyka_consent_v1 (localStorage)A local copy of your cookie decision, so that the banner does not appear on every visit.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the policy changes or browser data are cleared
  • geotaktyka:map-settings:v1, geotaktyka:map-view:v1, geotaktyka:map-layers:v1, geotaktyka:time-mode (localStorage)Map settings, the layers you switched on, the last map view and the time of day in the 3D scene. When you are signed in, your layer choice (without any map position) is also saved in your Account so it is available on your other devices.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until browser data are cleared
  • gt-city, gt-foreign-notice-dismissed (localStorage)The city you selected on the home page and dismissal of the notice for visitors from outside Poland.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until browser data are cleared
  • geotaktyka:passkey-prompt-dismissed, geotaktyka:listing-wizard:draft, geotaktyka:contact:lastSubmitAt:*, italy-swr-cache (localStorage)Dismissed hints (e.g. the suggestion to add a passkey), listing form draft, protection of the contact form against multiple submissions, temporary cache of map data.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until browser data are cleared
  • geotaktyka:corr-locale-init:* (localStorage)A marker that the correspondence (e-mail) language has already been set once for your Account; the key name contains the Account identifier.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until browser data are cleared
  • geotaktyka:kc-auto-redirect-at, geotaktyka:stepup-resume, geotaktyka:guest-banner-dismissed (sessionStorage)Protection against sign-in redirect loops, returning to an interrupted action after re-authentication, dismissed guest banner.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the tab is closed
  • geotaktyka_chunk_reload (sessionStorage)A one-off automatic page reload after a Service update when the browser holds outdated application files (protection against a reload loop).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until the tab is closed
  • gt.agency.org, gt.crm.org, gt.hints.dismissed:*, geotaktyka_pwa_install_dismissed_at (localStorage); geotaktyka_pwa_install_seen (sessionStorage)The organisation last selected in the agency panel and in the CRM, dismissed hints and the state of the app installation prompt (PWA).Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until browser data are cleared
  • gt-agenda-draft:*, gt-agenda-outbox (localStorage)Agenda and field mode: form drafts and the queue of notes saved without an internet connection, until they are sent to the server.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until sent to the server or browser data is cleared
  • gt-field (IndexedDB)Field mode: the encrypted data package for a given day and the queue of changes to synchronise — only on your device; deleted when you sign out. Stored only when you enable field mode.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until sign-out; the day package for no longer than 24 h, unsynchronised changes for no longer than 72 h
  • geotaktyka-v2 (Cache Storage, Service Worker)Application cache (Service Worker): page skeletons, so that the Platform works offline; it never contains responses with data (API) and is cleared when you sign out.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until browser data are cleared
  • geotaktyka-pages-v1 (Cache Storage, Service Worker)Application cache (Service Worker): copies of visited pages so the Service works offline; may contain content visible after signing in and is deleted when you sign out.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until you sign out or clear browser data
  • Web Push (PushManager)Push notifications: the browser stores the push service subscription, and we store its address and encryption keys — only after you have given your consent in the browser.Provider: DENYS YAKYMOV (geotaktyka.pl)Storage period: Until notifications are disabled in the browser or on the Platform

Analytics cookies

Google Analytics 4 — statistics on use of the Platform in order to improve it. These cookies are set only after you consent to this category; details in the “Visit statistics (Google Analytics 4)” section below.

  • _gaDistinguishing users for visit statistics.Provider: geotaktyka.pl (Google Analytics, Google Ireland Ltd)Storage period: 2 years
  • _ga_*Maintaining session state in visit statistics (* — the identifier of our Analytics service).Provider: geotaktyka.pl (Google Analytics, Google Ireland Ltd)Storage period: 2 years

Marketing cookies

These would be used to profile interests and display targeted advertising. They would require your explicit consent.

We do not use any marketing cookies or advertising scripts.

Personalisation cookies

These would be used to tailor content based on your behaviour and would require your consent.

We do not currently use personalisation cookies. Settings you choose yourself (e.g. map view) are saved in the browser storage described above.

Visit statistics (Google Analytics 4)

If you consent to the “analytics” category in the cookie banner, we use Google Analytics 4 to understand how the service is used. Without that consent the Google Analytics script is not loaded. We use Google Consent Mode v2, in which all signals are denied by default; advertising signals (ad_storage, ad_user_data, ad_personalization) are never granted, and Google Signals and ad personalisation are disabled.

We do not use Google Analytics in private areas (account, dashboard, administration, sign-in pages). Page addresses are sent without query strings; we do not send user IDs or e-mail addresses. People who have objected under art. 21 GDPR are excluded from analytics. According to Google, Google Analytics 4 does not log or store IP addresses.

Cookies: _ga (distinguishes users, 2 years) and _ga_* (persists session state, 2 years; * stands for the identifier of our Analytics property). These are first-party cookies of our domain, set by Google Analytics.

The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which processes this data on our behalf as a processor under the Google data processing terms. Data may be transferred to Google LLC in the USA on the basis of Commission Implementing Decision (EU) 2023/1795 on the adequate level of protection (EU-US Data Privacy Framework) and standard contractual clauses. We keep data in Google Analytics for 14 months.

Legal basis: your consent — art. 6(1)(a) GDPR and art. 399(1) of the Polish Electronic Communications Law of 12 July 2024 (Prawo komunikacji elektronicznej, Dz.U. 2024 item 1221) for storing information on, and accessing information from, your device.

You can withdraw your consent at any time in the cookie preferences. Withdrawing consent deletes the _ga cookies from your browser and does not affect the lawfulness of processing carried out before the withdrawal.

Payments (Stripe)

Payments take place within GeoTaktyka, in Stripe's payment form embedded in the pages where you pay (“Plan & billing”, buying a plan). Only on those pages do we load the Stripe.js script (js.stripe.com); Stripe may store its own cookies there (in particular __stripe_mid — up to 1 year, __stripe_sid — 30 minutes) and device identifiers necessary for a secure payment, authentication (e.g. 3-D Secure) and fraud prevention. These are strictly necessary to carry out the payment you order — they are not used for advertising or analytics and do not require consent. We do not load Stripe.js on any other page of the Service.

External map resources

To display labels on the map, your browser downloads map font files (glyphs) from fonts.openmaptiles.org (the OpenMapTiles project). When our own map tiles are unavailable, we show a fallback map from tile.openstreetmap.org (OpenStreetMap Foundation). As with any download from the internet, these providers receive technical connection data, including your IP address and browser information. GeoTaktyka loads no scripts from these providers, passes them no information about you or the pages you view, and does not use these resources for analytics or marketing. The legal basis is our legitimate interest in displaying the map correctly (Art. 6(1)(f) GDPR).

How to disable cookies in your browser

In addition to the preferences panel above, you can delete or block cookies directly in your browser. Blocking strictly necessary cookies will prevent you from signing in.

Approximate location from your IP address

To show data for your city and to tell visitors from outside Poland that the service covers Poland only, we look up your approximate country and city from your IP address once per visit (the country comes from Cloudflare, the city from a local DB-IP database). We do this on the basis of our legitimate interest (Art. 6(1)(f) GDPR). The IP address and the result are not stored or linked to your activity, and no cookies are used for this. A city you choose manually and a dismissed notice are remembered only in your browser's storage (localStorage).

IP geolocation by DB-IP (CC BY 4.0)

Cookie policy version: 2.1-2026-09-28 · Last updated: 28 September 2026