Excellent PRO
Excellent PRO

Cookies & privacy

Cookie Policy

Version 1.0 · excellentpro.app

The excellentpro.app Platform uses only strictly necessary cookies for the operation of the service (login, shopping cart, acceptance preference). We do not use marketing, analytics or profiling cookies. This Cookie Policy supplements the Privacy Policy.

§ I

What cookies are

  1. Cookies are small text files saved by the browser on the User's device. They allow the site to remember preferences (e.g. login status, shopping cart contents) between visits and subpages.
  2. Cookies do not contain personal data that would allow direct identification - they store only a session identifier referring to the Controller's database.
  3. In addition to classic cookies (HTTP cookies), the Platform uses the browser's localStorage - an analogous mechanism kept locally and not sent to the server in HTTP headers.
§ II

Cookies used on the Platform

All of the cookies below are strictly necessary for the operation of the service. Without them you will not be able to log in, place an order or retain your preferences.

sb-*-auth-token
Purpose: The login session (Supabase Auth) - keeps you logged in across pages and subpages.
Duration: 7 days from the last activity.
Type: HTTP cookie, httpOnly, Secure, SameSite=Lax.
cart_local
Purpose: The shopping cart contents for Users who are not logged in (stored locally in the browser).
Duration: Until the User manually clears the browser data.
Type: localStorage (not an HTTP cookie).
cookie_consent
Purpose: Remembering acceptance of this policy - so that the banner notice does not appear again on every visit.
Duration: 12 months.
Type: localStorage.
§ III

What we do NOT use

The Controller deliberately does not use the following tracking technologies:

  • Google Analytics, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag
  • remarketing tools (Google Ads, Meta Ads, programmatic)
  • third-party cookies that collect data for profiling
  • web beacons, pixel tags, fingerprinting (canvas/font/audio)
  • session recording (Hotjar, Microsoft Clarity, FullStory, etc.)
  • A/B testing tools based on profiling

This is a deliberate decision - the Platform is a B2B tool for fulfilling orders, not a marketing channel that requires the profiling of users.

§ IV

Legal basis

  1. Cookies strictly necessary for the functioning of the service do not require the User's consent - legal basis: Article 173(3)(2) of the Telecommunications Act of 16 July 2004 (Journal of Laws 2004 No. 171, item 1800, as amended) - the exemption for cookies strictly necessary to provide a service requested by the user.
  2. To the extent that cookies process data which may constitute personal data (e.g. a session identifier linked to the Customer's account), the legal basis is Article 6(1)(b) of the GDPR - performance of a contract.
  3. The banner informing about cookies that is shown on the first visit is informational in nature, not consent-based - the Controller does not collect consents, because it uses only strictly necessary cookies. The banner fulfils the transparency obligation arising from the GDPR and the Telecommunications Law.
§ V

Managing cookies

  1. You can disable cookies at any time in your browser settings. Disabling session cookies will make it impossible to log in and place an order - the Platform will not function correctly.
  2. To delete cookies already saved on your device, use the "Clear browsing data" function in your browser.
  3. Instructions for popular browsers:
  4. To reset the record of banner acceptance (e.g. to see it again), clear localStorage for the excellentpro.app domain in your browser's developer tools (F12 → Application → Local Storage → delete the cookie_consent key).
§ VI

Consent banner

  1. On the first visit to the Platform, a banner informing about the use of cookies is displayed. The banner contains:
    • a short notice about the use of cookies strictly necessary for the operation of the service
    • a statement that no tracking/profiling is used
    • a link to this Cookie Policy and the Privacy Policy
    • an "I understand" button confirming that you have read the notice
  2. The banner is not a consent mechanism within the meaning of the GDPR - it serves an informational function. There is no need to collect consent because the Controller uses only strictly necessary cookies (see § IV).
  3. After clicking "I understand", the cookie_consent key is saved in localStorage with the value "1" and a validity of 12 months. The banner does not appear again until this key is cleared or its validity expires.
  4. The banner is accessible to people using assistive technologies (screen readers) - it has a role="dialog" attribute and an ARIA label describing the content.
§ VII

Contact

For matters relating to cookies, their configuration or this Policy - please contact the Controller:

For the full rules on the processing of personal data - see the Privacy Policy. For the full terms of use of the Platform - see the Terms and Conditions.

This Cookie Policy comes into force on 1 May 2026.

Related documents: Terms and Conditions · Privacy Policy