Cookie Policy of the Mission: Family service
Last updated: 24 April 2026
In short: we use only strictly necessary cookies (session, security) and cookieless analytics (Umami — self-hosted, which does not set cookies or use fingerprinting). We do not use marketing, advertising, or tracking cookies.
1. What cookies are
Cookies are small text files that websites store on your device (computer, phone, tablet) when you visit. They help the site operate and remember your preferences.
The duty to inform about cookies follows from art. 173 of the Polish Telecommunications Act of 16 July 2004 (Journal of Laws 2004 No. 171, item 1800, as amended) in conjunction with GDPR art. 6.
Within this policy, “cookies” also covers related technologies: Local Storage, Session Storage and cookieless fingerprinting, which are subject to analogous rules.
2. Necessary and functional cookies (always active)
These cookies are necessary for the service to operate (sign-in, session persistence) or functional — they remember your preferences (chosen language, selected child profile). They are first-party cookies, set in response to your actions and not used for tracking. Under art. 173(3) of the Telecommunications Act, their use does not require your consent.
| Name | Provider | Purpose | Lifetime |
|---|---|---|---|
sb-<project>-auth-token | Supabase Auth | JWT session token — keeps you signed in between pages. | Until sign-out or session expiry (max 7 days) |
sb-<project>-auth-token-code-verifier | Supabase Auth | PKCE verifier used during Google OAuth sign-in. | A few minutes (duration of the OAuth flow) |
__cf_bm | Cloudflare | Bot management — set when the domain is behind the Cloudflare proxy layer. Not used for profiling or advertising. | 30 minutes from the last request |
active_child | Mission: Family (first-party) | Functional cookie — remembers which child profile is selected in the dashboard so we can filter the content shown. Stores only the selected profile's identifier. | 1 year |
NEXT_LOCALE | Mission: Family (next-intl) | Functional cookie — remembers your chosen interface language (Polish, English, Spanish). | 1 year |
3. Local Storage (related to cookies)
| Key | Purpose | Lifetime |
|---|---|---|
cookie_notice_dismissed | Remembers that you dismissed the cookie banner so we don't show it again. The value is a plain boolean flag and does not identify the user. | Permanent, until the user clears browser data |
first_utm | UTM parameters of the link that first brought you to the site (e.g. utm_source=instagram) — used solely to record the acquisition source once, at account registration. Does not identify you and never leaves your browser unless you sign up. | Removed at registration; 90 days at most |
4. Cookieless analytics — Umami (self-hosted)
We use self-hosted Umami to collect aggregated, anonymous traffic statistics (page views, device types, countries of origin). Umami:
- does not set cookies,
- does not use fingerprinting to identify individual users,
- does not collect IP addresses in clear form (only aggregated country/region),
- does not perform cross-site tracking.
In line with the EDPB guidelines on analytics, this kind of solution does not require cookie consent, because it does not fall under art. 173(1) of the Telecommunications Act.
5. What we do NOT use
For clarity — our service does not use:
- marketing or advertising cookies (no Google Ads, no retargeting),
- Meta Pixel (Facebook),
- TikTok Pixel,
- Google Analytics,
- LinkedIn Insight Tag,
- Hotjar / LogRocket / other session-recording tools,
- partner / affiliate cookies.
6. Managing cookies
You can control cookies at the browser level:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
⚠️ Blocking strictly necessary cookies will prevent sign-in and use of the service.
Clearing Local Storage (the cookie_notice_dismissed value) will cause the banner to be shown again on your next visit — there are no other consequences.
7. Changes to this cookie policy
If we introduce analytical, functional, or marketing cookies in the future (which is not currently planned), we will then deploy a consent-management tool with granular category choice and ask for your consent before such cookies are stored on your device.
We will notify you of material changes to the Cookie Policy by email at least 14 days in advance and via a banner in the service.
8. Contact
For matters regarding cookies and privacy:
Szymon Wąsik Systemy Informatyczne, ul. Stalowa 34/34, 05-800 Pruszków, Poland, NIP 7792188559, REGON 528805350, phone +48 572 514 230, GDPR email: rodo@misjarodzina.ai.