Cookie Policy - Underpaint

Underpaint is operated by Rockon sp. z o.o., ul. gen. Józefa Zajączka 30/1, 01-510 Warszawa. Questions: privacy@underpaint.io. Cookies are small files a site stores in your browser. We split them into necessary ones, without which the site does not work, and optional ones, which we set only with your consent. 1. Necessary cookies Always on, no consent needed. up_consent. Remembers your choice in the cookie banner. 6 months. NEXT_LOCALE. Remembers the language you chose. 12 months. authjs.session-token. Keeps you signed in. Until you sign out or the session expires. authjs.csrf-token and authjs.callback-url. Stop forms being submitted from another site and bring you back after sign-in. Until the browser session ends. In production the sign-in cookie names carry a __Secure- or __Host- prefix. 2. Analytics cookies (with consent) On the marketing pages (home, pricing, help, role pages, legal documents) we use Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data as our processor. Data may reach Google LLC in the United States; the transfer relies on Google's certification under the EU-US Data Privacy Framework. Why: we count visits, where they come from and clicks, to learn which pages help people understand Underpaint. How: without Google Signals and without ad personalisation. Google does not store the full IP address. Cookies: _ga and _ga_<ID>, up to 13 months. We keep the data in Google Analytics for 14 months. 3. Marketing cookies (with consent, only when we run ads) When we run ads, we may measure them with Meta Pixel. The banner then shows a "Marketing" category. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. For collecting this data and passing it to Meta we are joint controllers with Meta; what Meta does with it afterwards follows Meta's terms. Why: to see whether our ads bring people to the site and to sign-up. Cookies: _fbp and _fbc, up to 3 months. 4. Consent and withdrawal Until you choose in the banner, we load no analytics or marketing tool. Rejecting is as easy as accepting, and under "Settings" you can agree to some categories only. You can change or withdraw consent at any time with the "Cookie settings" link in the page footer or the button below this policy. When you withdraw, we remove the analytics and marketing cookies from your browser. We ask again after 6 months or when we change the tools. The legal basis for processing data from optional cookies is your consent (article 6(1)(a) GDPR). Withdrawing it does not affect processing before the withdrawal. 5. The app after sign-in The Underpaint app uses no analytics and no advertising pixels. It sets only the necessary cookies from section 1. You can also delete cookies in the browser. Deleting the session cookie signs you out.