1. Privacy-first approach
snok.ai is designed to minimise tracking. Strictly necessary cookies (session, anti-spam) always run and require no consent (Polish Telecommunications Law, Art. 173(2), mirroring the ePrivacy Directive). Analytics cookies (Google Analytics 4) load only after you give consent in the banner shown on your first visit - denied by default (Google Consent Mode v2). We do not use Meta Pixel, LinkedIn Insight Tag or advertising tools.
2. Strictly necessary files
The site uses the following cookies and local-storage mechanisms, which are necessary for it to function:
- Session cookie (HTTP-only, SameSite=Strict) - keeps a session active while filling in forms. Expires when the browser is closed.
- Form timestamp - a hidden anti-bot mechanism verifying that a form was not submitted by an automated script. Persists until the form is submitted.
- Honeypot - an invisible form field used to protect against spam. It does not store any information about the user.
3. Cookieless analytics (Vercel Analytics)
We use Vercel Web Analytics and Vercel Speed Insights - tools that anonymously measure site performance and traffic without using cookies or personal identifiers. This mechanism is exempt from the requirement to obtain GDPR/ePrivacy consent and runs regardless of your choice in the banner.
The legal basis for this processing is the controller's legitimate interest (Article 6(1)(f) GDPR) in ensuring the performance, stability and security of the site.
The tool is operated by Vercel Inc. (Delaware, USA) - data transfers rely on the EU-US Data Privacy Framework adequacy decision and standard contractual clauses (SCCs) as an additional safeguard.
4. Analytics with consent (Google Analytics 4)
With your consent given in the cookie banner, we run Google Analytics 4 to better understand how visitors use the site (visit counts, navigation paths, popular content). Google Signals and advertising features are disabled - GA4 data is not combined with Google's advertising profiles or used for remarketing. Until consent is given, GA4 stays blocked (Google Consent Mode v2, default: denied).
The legal basis is your consent (Article 6(1)(a) GDPR), which can be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out before withdrawal. Event-level analytics data in GA4 is retained in line with Google Analytics retention settings (a maximum of 14 months).
The tool is operated by Google LLC (Delaware, USA) - data transfers rely on the EU-US Data Privacy Framework adequacy decision and standard contractual clauses (SCCs).
5. Detailed list of cookies
The table below lists all cookies and local-storage mechanisms used on snok.ai. Vercel Web Analytics and Speed Insights do not use cookies and therefore do not appear in this list.
| Name | Provider | Purpose | Lifetime | Category |
|---|---|---|---|---|
| Session cookie | SNOK (snok.ai) | Keeps a session active while filling in a form | Until the browser is closed | Strictly necessary |
| Form timestamp | SNOK (snok.ai) | Anti-bot check that a form was not submitted by a script | Until the form is submitted | Strictly necessary |
| Cookie consent record (Silktide) | SNOK / Silktide (self-hosted) | Remembers your consent choice | Until you change your choice or clear browser data | Strictly necessary |
_ga | Google LLC | Distinguishes users in Google Analytics 4 | 2 years | Analytics (with consent) |
_ga_<id> | Google LLC | Maintains session state in Google Analytics 4 | 2 years | Analytics (with consent) |
Analytics cookies (_ga, _ga_<id>) are stored only after you give consent in the cookie banner.
6. Managing consent and cookies
You can change the choice made in the first-visit banner at any time - a cookie preferences icon is available in the corner of every page. You can also manage cookie settings in your browser (Chrome, Firefox, Safari, Edge). Blocking strictly necessary cookies may prevent the contact form from being submitted.
7. Changes to this policy
If we introduce additional marketing tools that require consent (for example, advertising campaigns), we will update this policy and extend the consent-management mechanism with new categories. We give 14 days' notice of any such changes on the homepage.