Cookie Policy

Last updated: 11 October 2026

This policy explains cookies and similar technologies on the English and Polish versions of yastik.org, including our contact pages on that domain. It explains the difference between necessary site operation, optional browser storage and external resources, and how you can control optional features.

1 Who operates the website

The website is operated by Yastik sp. z o.o., ul. Księcia Witolda 49/15, 50-202 Wrocław, Poland. KRS: 0001074378. NIP: 8971930898. REGON: 527157682.

For questions about this policy, contact [email protected]. Our Privacy Notice at https://yastik.org/privacy explains the purposes and legal bases of personal data processing, recipients, international transfers, retention and your rights.

2 Cookies and similar technologies

A cookie is a small piece of information stored by your browser when it interacts with a website. Some cookies last only for a session; others remain until their expiry or deletion. A cookie may be set in connection with our own service or a third-party service used on our website.

Other technologies can also store or access information on your device. Session storage generally keeps information within a browser tab and is normally cleared when that tab's session ends. Local storage can persist longer. These technologies are not exempt from device-storage rules just because they are not called cookies.

An external resource, such as a font file, can involve personal data processing without setting a cookie. Your browser must communicate with the resource provider to request the file. We explain these connections separately below.

3 Necessary and optional technologies

Strictly necessary device storage may be used without consent only where it meets the exception in applicable law, such as storage needed for communication transmission or an online service you expressly request. Calling a technology necessary does not make advertising or general audience measurement necessary.

We ask for your prior consent before using optional browser storage. If personal data processing is based on that consent, Article 6(1)(a) GDPR applies. For information required to deliver and protect the website, our legitimate interests under Article 6(1)(f) GDPR may apply, but that basis does not replace a consent required for access to or storage on your device.

The relevant Polish device-storage requirements are in Articles 399 and 400 of the Electronic Communications Law, Prawo komunikacji elektronicznej. Consent is not inferred from scrolling, continuing to browse, accepting the Privacy Notice or sending a contact form.

4 Browser storage used for optional navigation

When you permit optional functional storage and then switch between the English and Polish versions, the website can temporarily remember your position on the page. This helps the corresponding page open at the same position. It is a navigation convenience, not an advertising identifier or a history of the pages you viewed.

This feature is not required to submit an enquiry or change the website language. If you decline it, language navigation remains available without remembering your scroll position.

To remember your choices, we also use a consent preference record when the settings tool is active. Its exact name, storage method and expiry are displayed in Cookie settings. The record stores your selection and the policy version needed to apply it; it is not used for advertising. A session-only record expires with the relevant browser session. Any longer-lived record must have its specific expiry disclosed before use.

5 Cloudflare delivery and security

We use Cloudflare to deliver and protect the website. Cloudflare processes technical request information, such as IP addresses and request headers, as part of those services. Its presence does not mean that every cookie offered by Cloudflare is active on our website.

Some Cloudflare protection features can use security cookies when a relevant feature or challenge is enabled. If such cookies are active, Cookie settings lists their actual names, purposes and lifetimes. A security cookie is treated as necessary only where its use meets the applicable necessity test. We do not use security information as a substitute for optional advertising or behavioural tracking.

Cloudflare's description of its cookie types is available at https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/. The list describes Cloudflare's available technologies, not a claim that all of them are installed on yastik.org.

6 External fonts

If you enable external fonts, your browser requests Google Fonts from fonts.googleapis.com and fonts.gstatic.com to display Inter and Sora. These requests can disclose your IP address, the requested resource and HTTP headers, including browser information and a referring page, to Google. We load these optional external resources only after your permission. If you decline, the website remains readable using fallback fonts.

Google states that its Fonts API does not set or log cookies and does not use information collected by Google Fonts to create end-user profiles or for targeted advertising. Nevertheless, requesting a font involves a connection to Google and associated data processing. This feature is therefore disclosed as an external resource, not labelled as an analytics cookie.

If the fonts are delivered entirely from our own infrastructure, your browser does not need to contact Google for those files. More information is available at https://fonts.google.com/faq#privacy and https://policies.google.com/privacy.

7 Forms and email delivery

When you submit a form, our server processes the request and emails the relevant information to our sales inbox through Amazon SES. This is separate from installing analytics, chat, embedded marketing forms or visitor-tracking code in your browser. Email delivery itself does not require a CRM tracking cookie on your device.

Our form data can include the current page, referring page, language, campaign parameters and submission time, as described in the Privacy Notice. A form submission is not consent to optional cookies or to a newsletter. We do not describe information linked to your contact details as anonymous.

This website configuration does not use advertising pixels or behavioural analytics cookies. If we introduce them, we update the information about providers, purposes, data and expiry, and obtain the required prior consent before they start. Refusal of optional tracking does not prevent submission of a form.

8 How to make or change your choice

Where optional technologies are available, open Cookie settings using the permanent link in the website footer. The settings tool allows you to accept all optional features, reject optional features or select the specific categories you want. Optional categories are off until you choose to enable them.

You can reopen the same settings at any time and change your selection. Withdrawal is as easy as giving consent and stops further activation of the affected optional features. We remove optional first-party records we can control and communicate your changed choice to relevant integrations where applicable. You can also clear browser data as described below.

Withdrawal does not retrospectively make previous lawful processing unlawful and does not automatically delete information you separately submitted in a form. Use the contact details in our Privacy Notice if you also want to exercise a personal data right.

If only strictly necessary technologies are enabled, we do not ask you to consent to them. We continue to explain what they do. Optional functions are not activated merely because a consent prompt is absent.

9 Browser controls

Your browser settings allow you to inspect, block or delete cookies and other site data. Depending on your browser, you can also restrict third-party cookies or clear storage for yastik.org specifically. Clearing storage may remove your saved preference and cause the settings tool to ask for a choice again.

Blocking all storage can affect a service that genuinely depends on necessary storage. It should not turn refusal of advertising into refusal of the main website. Browser controls supplement our consent tool; their availability is not used to assume that you agreed to optional processing.

Our consent choices are applied to the browser or tab where you make them. A different browser, device or new session may require a separate choice, depending on how the preference is stored.

10 Retention and international processing

The storage lifetimes disclosed above and in Cookie settings describe information on your device. They are not necessarily the retention periods for technical logs or personal data already received by Yastik or a provider. Those periods and criteria are explained in the Privacy Notice and the relevant provider information.

Cloudflare and, when enabled, Google operate globally, so some processing may occur outside the European Economic Area. Applicable transfer safeguards are described in our Privacy Notice. Cookie consent is not treated as a blanket permission for unrestricted international transfers.

11 Updates and contact

We update this policy and the inventory in Cookie settings when technologies or their purposes change. A new optional purpose is not activated on the basis of your consent to a different purpose. The revision date is shown at the beginning of this policy.

Contact Yastik sp. z o.o. at [email protected] or ul. Księcia Witolda 49/15, 50-202 Wrocław, Poland, if you have a question about storage or optional website features.