Cookie Policy

1.What are cookies

Cookies are small text files placed on your device by a website you visit. They allow the website to remember information about your visit, such as your preferred language and other settings. "Similar technologies" include browser local storage, session storage, and pixel tags. In this policy we use "cookies" to refer to all of these.

Under Polish law (Article 398 of the Electronic Communications Law of 12 July 2024, Prawo komunikacji elektronicznej, which replaced the analogous provisions of the repealed Telecommunications Act of 2004 on 10 November 2024) and the EU ePrivacy Directive, we are required to inform you about cookies that are not strictly necessary for the operation of the service, and to obtain your consent before placing such cookies on your device. Because Kepta does not currently use any non-essential cookies on kepta.legal, no consent mechanism is required; the site shows a short informational notice instead.

2.Cookies on kepta.legal

Marketing website (kepta.legal): two strictly necessary cookies. Our marketing site sets two first-party cookies. `NEXT_LOCALE` remembers your language choice (Polish or English). `kepta_jx` remembers which country's price list you asked to see (Poland, Sweden, or Germany); it is set for 12 months and contains only a two-letter country code, no personal data. Both are strictly necessary preference cookies for the service you asked for and are therefore exempt from the consent requirement. The site sets no other first-party cookies and embeds no third-party services that set cookies. There is no Google Analytics, no Google Tag Manager, no advertising pixels, no social-media widgets, no chat tools, and no marketing-automation scripts on kepta.legal.

Local storage: cookie-notice dismissal. When you dismiss the informational cookie notice, a single browser local-storage entry (`kepta_cookie_notice`) records that choice so the notice is not shown again on that browser. It contains no personal data and never leaves your device.

Analytics: Plausible, cookieless. We use Plausible Analytics (Plausible Insights OÜ, Tallinn, Estonia, EU) to count page views and understand which pages are useful. Plausible was designed to comply with GDPR and the ePrivacy Directive without consent: it does not use cookies, does not store IP addresses, does not create persistent user identifiers, and does not share data with third parties. Plausible's privacy stance is documented at plausible.io/data-policy.

Fonts and assets. Web fonts are served from the same origin as the site (`kepta.legal`) and do not set cookies. No third-party font CDN is used.

3.Cookies on the Kepta Platform

The Kepta platform is not available at the launch of this website. When it goes live it will be served from `agent.kepta.legal` and other tenant subdomains, and will use a small number of strictly necessary cookies and local-storage items to operate. These are exempt from the consent requirement under Article 5(3) of the ePrivacy Directive because they are essential for the service the user has requested. Everything in this section applies only when you use the Kepta platform, not to the marketing website.

Authentication. A first-party session cookie (for example `kepta_session`) keeps you signed in for the duration of your session. It is HttpOnly, Secure, SameSite=Lax, and is deleted when you sign out.

CSRF protection. A short-lived first-party cookie (for example `kepta_csrf`) protects against cross-site request forgery on form submissions.

UI state. Local storage holds non-personal interface preferences such as panel widths, recently viewed items, and theme. This data never leaves your browser.

We will not deploy advertising, analytics-cookie, or fingerprinting technologies on the platform.

4.Your choices

Because kepta.legal sets only the strictly necessary language and price-list-country cookies and no non-essential cookies, there is nothing to decline on the marketing site. On the Kepta platform, once it is live, declining the strictly necessary session cookie would prevent you from signing in; we therefore cannot offer an opt-out for that single cookie without disabling the service.

You can manage cookies generally in your browser settings: every modern browser lets you view, delete, and block cookies. Instructions for the major browsers are linked from your browser vendor's help pages.

You can also block third-party scripts using a privacy extension. We test kepta.legal to remain fully functional with the most popular blockers enabled.

5.Changes to this policy

If we ever add a cookie that is not strictly necessary, for example, a third-party analytics product, a customer-support chat tool, or a marketing pixel, we will: (i) update this page; (ii) display a consent banner on the affected pages; and (iii) not place any non-essential cookie on your device before you have given explicit, informed, and freely given consent.

Material changes to this policy will be summarised at the top of the page for at least 30 days following publication.

6.Contact

Questions about cookies or about how we collect or use information should be sent to contact@kepta.legal. The data controller is Grasperly Sp. z o.o., ul. Tczewska 4a/78, 01-674 Warszawa, Poland (KRS 0001238012, NIP 7252366483). You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.