Cookie Policy

1. What Are Cookies

Cookies are small text files stored on your device when you visit a website. They are widely used to make websites function properly, improve user experience, and provide reporting information. This Cookie Policy explains how koncal studio s.r.o. ("we", "us") uses cookies and similar technologies on the kansei.works website and application, in compliance with the ePrivacy Directive (2002/58/EC as amended by 2009/136/EC), Act No. 480/2004 Sb. on certain information society services (Czech Electronic Communications Act), and the GDPR.

2. How We Use Cookies

We use cookies for essential functionality (authentication, security) and, with your consent, for analytics purposes. We categorize cookies into the following types: strictly necessary, analytics, and functional. We do not use advertising or marketing cookies. The legal basis for strictly necessary cookies is our legitimate interest in providing a secure and functional service (no consent required under Article 5(3) of the ePrivacy Directive). Analytics cookies require your prior consent.

3. Strictly Necessary Cookies

These cookies are essential for the operation of the Service and cannot be disabled. They do not require consent under EU law because the service cannot function without them:

• Session cookie (next-auth.session-token): Maintains your authentication session. Duration: 24 hours. Contains an encrypted JWT token for secure session management
• CSRF protection cookie (next-auth.csrf-token): Prevents cross-site request forgery attacks. Duration: session (deleted when browser closes)
• Language preference cookie (NEXT_LOCALE): Stores your selected language (cs/en). Duration: 1 year. Necessary for providing content in your preferred language

4. Analytics Cookies

These cookies help us understand how visitors interact with the Service. They are only set if you provide consent through the cookie banner:

• Google Analytics (_ga, _ga_*): Collects anonymized usage statistics, including pages visited, session duration, and traffic sources. Duration: up to 2 years. Data is processed by Google LLC under Standard Contractual Clauses. IP anonymization is enabled
• Google Analytics (_gid): Distinguishes unique visitors. Duration: 24 hours. Used for aggregate statistical analysis only

5. Functional Cookies

These cookies enhance the functionality of the Service by remembering your preferences:

• Theme preference: Stores your selected color theme (light/dark/system). Duration: 1 year. Stored in localStorage, not transmitted to servers
• UI state preferences: Remembers sidebar collapse state, table column preferences, and filter settings. Stored in localStorage for your convenience

6. Third-Party Cookies

We minimize the use of third-party cookies. Google Analytics is the only third-party service that may set cookies, and only when you have provided consent. Payment processors (Stripe, GoPay) may set their own cookies when you interact with payment forms — these are governed by the respective processor's cookie policies and are necessary for secure payment processing under PCI DSS requirements. We do not use social media plugins, advertising networks, or other third-party tracking services.

7. Managing Cookies

You can manage your cookie preferences at any time. For analytics cookies, use the cookie consent banner displayed on the website, or withdraw consent by contacting us at info@kansei.works. For all cookies, you can configure your browser to block or delete cookies. Please note that blocking strictly necessary cookies may prevent the Service from functioning correctly (you will not be able to log in). Instructions for common browsers: Chrome (Settings > Privacy and Security > Cookies), Firefox (Settings > Privacy & Security > Cookies), Safari (Preferences > Privacy), Edge (Settings > Cookies and site permissions).

8. Cookie Duration

Session cookies are automatically deleted when you close your browser. Persistent cookies remain on your device for the duration specified above or until you manually delete them. We review and update cookie durations periodically to ensure they are limited to the minimum necessary period. The authentication session cookie expires after 24 hours, requiring you to log in again for security purposes.

9. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated through a notice within the Service or via email. The date of the last update is indicated at the top of this page. We encourage you to review this policy periodically.