PayloadCMS
Products
Insights
About us
Contact

Payload CMS plugins, starters, tools, and tutorials. Production-ready, drop-in, yours to ship.

Newsletter

Plugin releases, dev insights, and PayloadCMS ecosystem updates. No spam.

Products
  • Plugins
  • Packages
  • Tools
Tools
  • Vibecoder
  • Tutorial platform
  • Social media manager
Company
  • About us
  • Contact
  • Products
Legal
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Plugins|
  • Packages - starters|
  • Tools|
  • Support Platform|
  • Production-ready|
PayloadCMS
Products
Insights
About us
Contact

Cookie Policy

Terms of Services
Terms of Services
Services
Services

This Cookie Policy explains how zavcode.com (the "Website") uses cookies and similar technologies, what choices you have, and how you can manage them. It supplements our Privacy Policy and forms part of our Terms of Service.

By continuing to use the Website you accept the use of necessary cookies. The use of analytics cookies requires your prior, explicit consent, which you can give or withdraw at any time via the cookie banner.

1. Who We Are

The Website is operated by:

Kacper Zawojski

Modzurów, ul. Arki Bożka 15, 47-415 Rudnik, Poland

NIP: PL6392031090

REGON: 527724419

Registered in CEIDG (Central Register and Information on Economic Activity)

Contact: [email protected]

2. What are Cookies and Similar Technologies?

Cookies are small text files placed on your device (computer, tablet, smartphone) by websites you visit. They allow the website to recognise your device, remember your preferences, and provide functionality.

Local storage is a similar mechanism that stores data directly in your browser, in many cases without an expiry date, until you clear it manually.

In this Policy, the term "cookies" refers collectively to cookies, local storage, and similar technologies, unless we say otherwise.

Cookies can be classified as:

  • Session cookies — deleted when you close your browser.
  • Persistent cookies — stored for a defined period or until you delete them.
  • First-party cookies — set by the Website you are visiting.
  • Third-party cookies — set by a different domain (e.g. an embedded service).

We use cookies under Article 173 of the Polish Telecommunications Law and the GDPR. Necessary cookies do not require your consent. Other categories require your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

3. Categories of Cookies We Use

We classify the entries we store on your device into four categories:

3.1 Necessary cookies are essential for the Website to function. They allow you to browse pages, use forms, secure forms against bots, keep your consent choices, and operate the admin panel. The Website cannot function properly without them, and they do not require your consent.

3.2 Functional cookies remember your preferences and choices to improve your experience (for example, alerts you have dismissed). They are not strictly necessary, but they are limited to your direct interactions with the Website.

3.3 Analytics cookies help us understand how visitors use the Website by collecting and reporting usage information (page views, page leaves, custom events). They are used only after you grant consent in the cookie banner.

3.4 Marketing cookies. We currently do not use any marketing or advertising cookies. If this changes, we will update this Policy and ask for your consent before any such cookie is set.

4. Cookies and Storage Used on the Website

The table below lists the cookies and storage entries we use, the entity that sets them, their purpose, category, and retention period.

IdentifierTypeProviderPurposeCategoryRetention
payload-tokenHTTP-only cookiezavcode (1st party)Authenticates and maintains the admin/user session in the content management systemNecessarySession / up to 7 days
consent_prefsLocal storagezavcode (1st party)Stores your cookie consent choices (version, locale, accepted categories)NecessaryUntil cleared by you
alert_storageLocal storagezavcode (1st party)Remembers UI alerts and notices you have dismissedFunctionalUntil cleared by you
_GRECAPTCHACookieGoogle LLC / Google Ireland Limited (3rd party)Distinguishes humans from bots and protects forms from spam (Google reCAPTCHA)Necessary (security)Up to 6 months
ph_* (and similar)CookiePostHog (loaded only after consent, served in the EU region where applicable)Statistical analytics — identifying returning visitors, measuring page views, page-leave events, and selected custom eventsAnalyticsUp to 12 months

The exact identifiers, particularly for PostHog, may vary depending on configuration.

5. Google reCAPTCHA

We use Google reCAPTCHA (v2 and/or v3), provided by Google Ireland Limited, to protect our forms against spam and automated abuse. reCAPTCHA sets the _GRECAPTCHA cookie and analyses your interaction with the Website (including IP address, mouse movements, and behavioural signals) to determine whether you are a human or a bot.

We rely on reCAPTCHA as a security measure on the basis of our legitimate interest (Article 6(1)(f) GDPR) in preventing abuse of our forms and infrastructure.

For more information, please see Google's Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms).

6. PostHog Analytics

We use PostHog to understand how visitors use the Website. PostHog is loaded only if you grant consent for analytics cookies in our cookie banner. Until you do, no PostHog cookies are set, no PostHog scripts are loaded, and no analytics events are sent.

PostHog is provided by PostHog Inc. (USA), with a UK affiliate Hiberly Ltd. PostHog Inc. acts as our data processor under Article 28 GDPR; we are the data controller. We have entered (or will enter, before activating analytics) into a Data Processing Agreement with PostHog, incorporating the Standard Contractual Clauses adopted by the European Commission for any transfers outside the EEA.

We use PostHog Cloud EU, hosted on AWS infrastructure in the eu-central-1 region (Frankfurt, Germany), so that event data captured via the Website is stored on EU-based servers. The legal basis for this processing is your consent (Article 6(1)(a) GDPR).

You can withdraw your consent at any time via the cookie banner or by clearing the relevant cookies and local storage in your browser. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

For more information, please see PostHog's Privacy Policy at https://posthog.com/privacy.

7. Google Fonts (No Third-Party Requests)

We use the Inter font family. The font files are loaded via Next.js, which self-hosts the fonts at build time. As a result, your browser does not make any requests to Google's servers when rendering the Website's typography, and no related personal data is transmitted to Google.

8. Managing Your Cookie Preferences

8.1 Cookie banner. When you visit the Website for the first time, a cookie banner appears, allowing you to accept or reject non-necessary categories. You can change your choices at any time by reopening the banner from the cookie settings link in the Website's footer.

8.2 Browser controls. You can block, accept, or delete cookies via your browser settings. Each browser is different — please refer to the help section of your browser:

  • Google Chrome: https://support.google.com/chrome/answer/95647
  • Mozilla Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
  • Apple Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471
  • Microsoft Edge: https://support.microsoft.com/microsoft-edge

8.3 Local storage. Local storage entries are not affected by browser cookie controls. To remove them, use your browser's "Clear site data" or developer-tools storage panel.

8.4 Effect of disabling cookies. Please note that disabling necessary cookies may prevent parts of the Website from working correctly (for example, form submission may fail without the reCAPTCHA cookie, and the consent banner may reappear on every visit if consent_prefs is blocked).

9. International Data Transfers

Some providers listed in this Policy (notably Google LLC for reCAPTCHA and PostHog Inc. for analytics) are established outside the European Economic Area or have parent companies based outside the EEA. Where any data transfer outside the EEA takes place, we rely on appropriate safeguards under Chapter V GDPR — in particular the Standard Contractual Clauses adopted by the European Commission (Decision 2021/914) — and, where applicable, supplementary measures and/or the EU–US Data Privacy Framework.

You may request a copy of the safeguards applied by writing to [email protected].

10. Your Rights

You have the rights set out in our Privacy Policy, including the rights of access, rectification, erasure, restriction, objection, and data portability under the GDPR, as well as the right to withdraw consent at any time and the right to lodge a complaint with the Polish supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl).

11. Changes to this Policy

We may update this Cookie Policy from time to time, in particular to reflect changes in the cookies and similar technologies we use, in applicable law, or in our services. The "Last updated" date at the top of this Policy indicates when it was last revised. Material changes will be communicated via the Website or, where appropriate, by email. We encourage you to review this Policy periodically.

12. Contact

For any questions regarding this Cookie Policy or our use of cookies, please contact us at:

Email: [email protected]