Cookie Policy

What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to site owners.

We also use similar technologies such as local storage and session storage. For simplicity, we refer to all of these as 'cookies' throughout this policy.

Cookies We Use

We use the following categories of cookies on the Retenza platform:

• Strictly necessary cookies — essential for the website to function. These include session authentication tokens and CSRF protection tokens. These cannot be disabled.
• Preference cookies — remember your choices such as language preference (the 'lang' cookie), dark mode, and UI settings. Without these, you may need to set preferences every visit.
• Analytics cookies — help us understand how visitors use our site (page views, session duration, feature usage). We use privacy-first analytics that do not share data with third parties.
• Marketing cookies — only set if you click on a paid advertisement to reach us. These help us measure which campaigns are effective. We do not use cross-site tracking.

Specific Cookies We Set

Below is a list of the main cookies set by Retenza:

• session — httpOnly, secure. Stores your login session. Expires when you close your browser or after 7 days of inactivity.
• lang — not httpOnly. Stores your language preference (en, pl, fr, de, ar-TN). Expires after 1 year.
• __csrf — httpOnly, secure. CSRF protection token. Session cookie.
• _retenza_anon — Analytics session identifier. No personally identifiable information. Expires after 30 days.

Third-Party Cookies

Some features of our platform use third-party services that may set their own cookies:

• Stripe — payment processing. Stripe may set cookies to prevent fraud and provide a seamless payment experience. See stripe.com/privacy.
• Google OAuth — if you connect Gmail. Google may set authentication cookies. See policies.google.com/privacy.
• Shopify — if you connect your store. Shopify OAuth may set session cookies. See shopify.com/legal/privacy.

We do not control third-party cookies. Please refer to the respective third-party privacy policies for details.

Managing Your Cookie Preferences

You have the right to manage or withdraw consent for non-essential cookies at any time.

• Cookie banner — on your first visit, you can accept or decline non-essential cookies via our consent banner
• Browser settings — most browsers allow you to block or delete cookies. See your browser's help documentation for instructions.
• Do Not Track — we honour the DNT browser signal for analytics cookies
• Opt-out page — visit /privacy to update your data preferences at any time

Blocking strictly necessary cookies will affect the functionality of the platform and may prevent you from logging in.

Data Transfers

Some cookies involve the transfer of data outside the EEA (for example, to analytics providers). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Changes to This Policy

We may update this Cookie Policy periodically. When we do, we will update the 'Last updated' date and, for material changes, display a new consent banner.