Skip to content

Cookie Policy

Version 2.0 · effective from 2 May 2026

This policy describes how we use cookies and similar technologies on the datanostro.com website and in the admin interface (dashboard). Our policy supplements the Privacy Policy.

Note: This policy describes cookies that we set on our website. Cookies transmitted via sGTM Containers to clients' platforms (GA4, Meta, etc.) are not covered by this document — responsibility for their lawful configuration always lies with the client (the data controller of their own site).

1. What are cookies

Cookies are small text files that a web server stores in a visitor's browser. On subsequent visits, the browser sends these files back to the server, which lets the website recognize a returning visitor, keep them logged in, store preferences, and measure usage of the site.

Besides classic HTTP cookies, this policy also covers similar technologies — local storage, session storage, web beacons (1×1 pixels), fingerprinting fragments, and others. We collectively call them "cookies" for brevity.

2. The types of cookies we use

2.1 Strictly necessary (essential)

These cookies are required for the basic functions of the site — without them the page couldn't work. They don't require consent (Art. 6(1)(f) GDPR — legitimate interest; § 89(3) of Act No. 127/2005 Coll. — the exemption for necessary cookies).

Name Purpose Duration Party
sessionidIdentification of a logged-in user sessionSession (until the browser is closed)1st party
csrftokenProtection against CSRF attacks on forms1 year1st party
cookieconsentA record of the cookie banner choice12 months1st party
django_languageThe selected site language (cs/en)1 year1st party
__cf_bmBot management — distinguishing humans from bots30 minutesCloudflare
cf_clearanceDDoS challenge response (after solving the captcha)30 daysCloudflare

2.2 Functional (preferences)

These cookies remember your choices (typically dark/light theme mode or which tab in the dashboard you last opened). They require consent only if they store data that could identify a user — which is not the case for our preference cookies.

NamePurposeDurationStrana
dn_themePreferred theme (light / dark)1 year1st party
dn_dashboard_tabThe last opened tab in the dashboard30 days1st party

2.3 Analytics

They help us understand how the site is used and how to improve it. They require explicit consent (opt-in) in the cookie banner. If you don't grant consent, no analytics cookies are set.

For our own website (datanostro.com) we don't use Google Analytics or similar external analytics tools. Instead, a lightweight in-house metric collector (DataNostro Telemetry) runs in the background, aggregating only indirect identifiers to the extent necessary for operation and evaluation:

NamePurposeDurationStrana
dn_anon_idA pseudonymous ID for deduplicating page views (no PII)30 days1st party

Without consent, dn_anon_id is not set; instead we record every page view as new — aggregate statistics aren't affected by this, we just lose the information about repeat visits by the same visitor.

2.4 Marketing

The datanostro.com website uses no third-party marketing or retargeting cookies (Google Ads, Meta Pixel, LinkedIn Insight Tag, etc.).

3. Legal basis

  • Strictly necessary and functional cookies — the controller's legitimate interest in the functioning of the service (Art. 6(1)(f) GDPR + § 89(3) of the Electronic Communications Act, the exemption for necessary cookies).
  • Analytics cookies — the user's explicit consent (Art. 6(1)(a) GDPR).

4. How to grant or withdraw consent

  • On your first visit, a cookie banner appears where you choose between "Reject all" (strictly necessary only), "Accept selection", and "Accept all".
  • You can change your choice anytime by clicking the "Cookies" link in the site footer or by deleting the cookieconsent cookie from your browser (the banner will reappear).
  • You can also manage cookies directly in your browser settings (Chrome, Firefox, Safari, Edge — search for "cookies management").

5. Third-party cookies

Our site loads a minimum of external resources. Currently a cookie may appear set by:

  • Cloudflare — see the table in Art. 2.1. It's used for DDoS protection and anti-bot management. Without it the site would be exposed to attacks — which is why these cookies are categorized as strictly necessary.

Our service doesn't load Google Fonts, Google Analytics, Meta pixels, Hotjar, Clarity, or other external trackers. We self-host all fonts and icons.

6. Disabling cookies in the browser

You can fully disable cookies in your browser settings. Some site functions may then not work correctly — in particular signing in to the dashboard, submitting the contact form (CSRF token), and retaining the language choice.

Instructions:

7. Changes to the policy

We may amend this policy if we add a new feature or a new external tool to the site that sets cookies. We update the effective date in the header. If a change requires fresh consent, we'll show the cookie banner again on your next visit.

Effective from 2 May 2026 · Version 2.0