1. Your account and choices

• Session and security - session, authentication and form protection cookies, including XSRF-TOKEN. These identify the signed-in user and protect requests to the service. Authentication cookies last up to 365 days; a session may end earlier, for example when you sign out.
• Selected language - preffered-lang remembers the website language for 365 days after it is saved.
• Dismissing the notification prompt - notification-box-shown remembers that you dismissed the prompt for 7 days. You grant permission for push notifications separately in your browser.
• Registration link parameter - free-month may be saved for 1 day after you follow a link with the free_month parameter. This belongs to an older promotional mechanism; it does not activate payments or a subscription.

Google’s consent management platform (certified under the IAB Transparency & Consent Framework) saves your consent choices, including in the FCCDCF and FCNEC cookies. Google sets their lifetime; you can check it in your browser settings. This way we do not ask on every visit. We remove the choice saved by our previous banner (jaty-consent), so we ask again after this change.

2. Registration source - with analytics consent

After analytics consent, the first_page_visited cookie remembers the first page path visited, while first_utm_source remembers the first utm_source value encountered in a link, such as a campaign name. These are session cookies; your browser may retain them when restoring a session.

During registration, including registration through Facebook, available values are sent to JaTy and saved with the account as the first page visited and the user acquisition source. This measurement is linked to an account and is therefore not an anonymous statistic. It is not needed to create an account, sign in or chat. Deleting browser cookies does not delete information already saved with the account.

3. Simple Analytics

We use Simple Analytics for aggregate visit statistics. According to its documentation, it uses no cookies or persistent visitor identifiers. Our integration respects Do Not Track (DNT), replaces profile addresses and tokens with generic paths, and disables UTM and referrer metrics. This is separate from the account attribution described above. Simple Analytics privacy information.

4. Google Analytics - with analytics consent

We load Google Analytics only after consent to measure visits and website use. The _ga and _ga_* cookies distinguish browsers and link page views; we set their lifetime to 180 days. Google receives measurement data. We do not send account identifiers, message content or profile names for measurement; we report generic page paths.

Google Analytics measurement is not used for advertising: we disable Google signals and ad personalisation in it. We do not use Google Ads, Hotjar or Facebook Pixel. Advertising is described in section 5. Facebook sign-in remains a separate function initiated at your request.

Provider information about cookies and data processing: Google cookies and Google privacy policy.

5. Google AdSense advertising

The service is free, and ads shown by Google AdSense (Google Ireland Limited) help pay for running it.

The AdSense script also shows the consent message, so it loads before you choose. Google then receives, among other things, your IP address, browser information and the address of the page you visit. We do not load it on a first visit to this policy, the privacy policy, the terms or addresses with one-time codes, such as a password reset.

With your consent, Google and its advertising partners may store and read cookies (e.g. __gads, __gpi, __eoi and IDE), show personalised ads and measure their performance. Google’s message lists the purposes and partners in its settings. If you do not consent to personalised ads, Google may show non-personalised ads, based e.g. on the page content and approximate location, or limited ads, which according to Google do not use cookies.

We do not share profile data, messages or information about who you are looking for with Google or advertisers. Google processes advertising data as a separate controller: Google business data responsibility and how Google uses information from partner sites.

6. Consent and managing data

When you visit from the European Economic Area, the UK or Switzerland, Google shows a consent message. You can consent, or use “Manage options” to refuse consent or choose purposes and partners. Consent to analytics storage covers Google Analytics and registration source measurement; advertising consents cover the ads in section 5. Analytics stays off until you choose. Outside these regions Google shows no message and we do not run Google Analytics or registration source measurement. Accepting the terms or privacy policy does not replace consent. An exception applies to operations necessary for transmission or to provide a service requested by the user.

You can change your choice at any time with “Cookie settings” on the cookie policy page, in your account menu or through the privacy settings link added by Google. We then stop further Google Analytics measurement and source attribution and remove analytics cookies accessible to the service. This does not automatically erase previously collected data or information saved with your account. Withdrawal does not affect the lawfulness of processing before withdrawal.

If you block ads, Google’s message and settings may not appear. We then do not run Google Analytics or registration source measurement.

Your browser privacy settings let you inspect, delete and block cookies and check their expiry dates. Blocking session and security cookies may prevent sign-in; deleting language preferences may require you to select a language again. Browser settings do not replace the service’s obligation to obtain consent for optional technologies.

For information about data saved with your account and contacting the controller, see our privacy policy.