Cookie policy

The rule we are applying

Storing anything on your device, or reading anything already stored there, is allowed only if we have told you what it is for and you have consented first. The exception is narrow: storage that is strictly necessary to transmit a communication or to deliver a service you expressly asked for. That is art. 399 of the Polish Electronic Communications Act of 12 July 2024, which replaced art. 173 of the old Telecommunications Act on 10 November 2024, and it applies to cookies, to localStorage, to sessionStorage and to anything else that persists.

Two consequences we take seriously:

• “Strictly necessary” is not the same as “useful to us.” Analytics is useful to us. It is not necessary to you, so it needs consent.
• Refusing must be as easy as accepting. Our banner has two buttons, the same size, one click each. There is no “manage 47 vendors” maze, no pre-ticked box, and no consequence for saying no — the site behaves identically either way.

What is stored without asking

These are the strictly necessary items. They carry no identifier that follows you anywhere, and they are not shared with anyone.

Name	Kind	What it does	How long
iruka:loaded	sessionStorage	Records that you have already seen the opening animation, so you do not sit through it on every page	Until you close the tab
iruka:consent	localStorage	Stores your answer to the banner — granted or denied. It exists so that we stop asking, and so that “no” keeps meaning no	Until you clear it or change it
__cf_bm and similar	Cookie, set by Cloudflare	Distinguishes humans from bots so the site is not knocked over by automated traffic. Set by our hosting and security provider, not readable by us	Around 30 minutes

If you block all of these, the site still works. You will see the intro animation more often and the consent banner will come back on each visit, because the record of your choice is one of the things you blocked.

What is stored only if you say yes

Google Analytics 4

We would like to know which pages get read and which get abandoned. That is the only reason this exists.

Name	What it does	How long
_ga	Holds a randomly generated identifier for your browser, so repeat visits are counted as one visitor rather than several	2 years
_ga_<measurement-id>	Holds session state for the same purpose	2 years

• Provider: Google Ireland Ltd., acting as our processor, with Google LLC in the United States as its sub-processor. Data can therefore be transferred to the US, on the Standard Contractual Clauses — see transfers.
• Legal basis: your consent, Article 6(1)(a) GDPR and art. 399 PKE. The tag is not in the page at all until you accept it — we do not load it in a “denied” state, we do not load it and wait, we do not load it at all.
• What we have switched off: Google signals and advertising features. The measurement is not used for advertising, remarketing or audience selling, and it is not joined to any advertising profile.
• Retention at Google: 14 months maximum.
• Where it runs: the marketing site only. There is no analytics inside InvoiceMatch/RozliczTo, e-Sprawozdanie, AduanaLink or CarPanel, so nothing you do with a client’s invoices is measured.

Change your mind

Consent can be withdrawn as easily as it was given — Article 7(3) GDPR — and withdrawing it here also deletes the _ga cookies from this browser rather than merely stopping future collection.

Cookie settings

You can also clear cookies and site data in your browser, or use its “do not track”-style settings. Browser settings alone are not something we treat as consent: art. 399(2) PKE allows consent through software settings in principle, but only where the settings actually record an informed choice about a specific purpose. A default that happens to permit cookies does not.

What we do not do

No advertising cookies. No remarketing pixels. No Facebook, LinkedIn or X pixel. No data brokers. No fingerprinting, no session recording, no heatmaps, no cross-site tracking. No cookie walls — you never have to accept anything to read a page.

Fonts, for completeness

The typeface is served from our own domain, so no third-party font service sees your IP address. Nothing about the fonts is stored on your device beyond the browser’s ordinary HTTP cache.

Inside the applications

Once you are logged into a product, it uses storage that is strictly necessary to keep you logged in and to remember your own settings — a session token and interface preferences. That is service delivery you expressly requested, so it needs no consent, and it is described in the product rather than here because it differs by product.

Questions

[email protected]. If you think something on this page is inaccurate, tell us — a cookie policy that does not match the page source is worse than none.