Cookie Policy

This Cookie Policy explains what cookies and similar technologies we use on transcriptlabs.io and why. It supplements our Privacy Policy.

1. Operator

The Service is operated by:

NODE Piotr Nowicki
al. Komisji Edukacji Narodowej 36, lok. 112B
02-797 Warszawa, Poland
NIP (VAT): PL9512304601 · REGON: 147233931
Email: info@transcriptlabs.io

2. What are cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to recognize you and remember information about your visit. We also use related browser storage technologies such as localStorage and sessionStorage.

3. Cookies we use

3.1 Strictly necessary (always active)

These cookies are required for the Service to function. Without them you cannot sign in or use protected features. Under Polish and EU ePrivacy law (Directive 2002/58/EC; art. 399 of the Polish Electronic Communications Act / ustawa — Prawo komunikacji elektronicznej, in force since 10 November 2024, replacing the former art. 173 of the Telecommunications Act), strictly necessary cookies do not require consent.

3.2 Functional (always active)

First-party browser-storage entries that remember your preferences and your cookie-consent choice. They do not transmit data outside our servers and are not used for advertising.

3.3 Advertising & conversion measurement (consent required — OFF by default)

We advertise TranscriptLabs on Google. To understand which ads lead to sign-ups and purchases, and to show our own ads to people who visited the site, we use the Google Ads tag (provider: Google Ireland Limited, with Google LLC as onward processor). This is the only advertising/measurement technology we use — we do not use Google Analytics, the Meta Pixel, or data brokers, and we never sell your data.

These cookies are disabled by default. We operate Basic Consent Mode: the Google Ads tag (gtag.js) is not loaded at all — and therefore contacts Google in no way, not even a cookieless signal — until you press Accept in our cookie banner. If you press Reject before accepting, the tag is never loaded. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal, clear any stored advertising-cookie consent, and do not start Google Ads processing. If you later withdraw consent after previously accepting, we immediately switch future Google Ads processing to denied and stop firing conversion events; you can also delete already-set Google cookies in your browser settings.

Legal basis: your consent — Article 6(1)(a) GDPR and the prior-consent requirement of art. 399 of the Polish Electronic Communications Act (Prawo komunikacji elektronicznej) / Directive 2002/58/EC. You can withdraw consent at any time (Section 5); withdrawal is as easy as giving it and does not affect processing already carried out. Google acts as an independent controller for some of this data — see how Google uses data from sites that use its services and the Google Privacy Policy. Some of this data is processed in the United States under Standard Contractual Clauses / the EU–U.S. Data Privacy Framework.

4. Browser local storage

We use browser localStorage / sessionStorage to store:

• Supabase auth tokens (mirrored from cookies for offline reuse)
• tl-ad-consent — your advertising-cookie consent decision and its timestamp, so we can honour it and prove it
• First-touch marketing attribution for the current session (UTM parameters), used to credit the right campaign on sign-up — first-party, not shared
• UI preferences

This data stays on your device and is not transmitted to us beyond what is described above.

5. Managing & withdrawing consent

You can change or withdraw your advertising-cookie consent at any time — it takes effect immediately and is as easy as granting it:

You can also control cookies through your browser settings:

• Chrome
• Firefox
• Safari
• Edge

Note: blocking strictly necessary cookies will break the sign-in flow and core functionality of the Service.

6. Do Not Track & Global Privacy Control

We treat a browser-level Global Privacy Control (and, where it is sent, Do Not Track) signal as a binding refusal of advertising cookies: when present, the Google Ads tag stays in its denied state and no consent banner is shown. Strictly necessary cookies still operate, as they are required for sign-in and payment security.

7. Changes to this policy

We may update this Cookie Policy. Material changes will be announced via email and a notice on this page.

8. Contact

Questions: info@transcriptlabs.io