Cookies and browser storage
Draft: 23 October 2026.
Template – to be reviewed by a lawyer before launch. This text is a draft for Stafeta's launch; the double-bracketed parts wait to be filled in, the rest waits for legal review. Not legal advice.
Essential by default, statistics only with your consent
Neither the website nor the platform loads advertising or tracking scripts. The website counts page views only if you allow it in the banner: Plausible Analytics is cookieless and aggregated, hosted in the EU, stores no identifier in your browser, and we never see individuals. Your choice is kept in your own browser (stafeta-consent) and can be changed any time under "Cookie settings" in the footer. The browser's Global Privacy Control signal is honoured: with it set, nothing is counted and no banner appears. The platform (the app) uses only strictly necessary cookies.
The website (stafeta.ai)
| Name | What | How long |
|---|---|---|
| stafeta_ref (cookie) | The referrer's code and the time of the click when you arrived through a ?ref= link; a later click counts instead. It reaches us only when you sign up. | 90 days |
| stafeta-consent (localStorage) | Your choice about statistics: allowed, or essential only. | until you clear it |
| Plausible Analytics | Only after your consent: page views and a few funnel events (button clicks, pricing views, sign-up starts), without cookies or personal data; the IP address is not stored. | nothing is stored in your browser |
| Cloudflare Turnstile | Bot protection on the waiting-list and Runner forms; no tracking, no profiling; it may set a temporary, strictly necessary cookie to solve the challenge. | for the challenge |
The platform (the app)
| Name | What | How long |
|---|---|---|
| session cookie | The identifier of your sign-in; httpOnly, Secure, SameSite. Without it there is no sign-in. | 7 days, expires after 24 hours of inactivity |
| stafeta_locale | The language of the interface. | 1 year |
| stafeta_tour, stafeta_tour_* (localStorage) | Whether you saw or skipped the tour. | until you clear it |
| stafeta_theme, stafeta_nav_open (localStorage) | Theme and the open groups of the menu. | until you clear it |
| Cloudflare Turnstile | Bot protection at sign-up, password reset, on public forms and on the client portal. | for the challenge |
Usage statistics use no cookie: the day's visitor token is a hash made with a random salt that lives one day and is then deleted, so it cannot be traced to a person; the browser's Global Privacy Control signal is honoured, and then nothing is counted. The owner can switch statistics off altogether.