Cookie Policy — AvatarMatch

1. What Are Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies in accordance with the EU ePrivacy Directive (2002/58/EC) and GDPR (EU Regulation 2016/679).

2. Cookie Categories

2.1. Strictly Necessary (Essential)

These cookies enable core Service functionality. They do not require consent and cannot be disabled.

• am_lang — interface language (duration: 1 year)
• am_theme — theme preference (duration: 1 year)
• Firebase Auth Token — authentication token (duration: session)
• CSRF token — cross-site request protection (duration: session)

2.2. Functional

Remember your settings and preferences. Require consent.

• Notification preferences (duration: 6 months)
• Content filter settings (duration: 3 months)

2.3. Analytics

Help us understand how users interact with the Service. Require consent. Data is anonymized.

• Firebase Analytics (duration: 2 years)
• Google Analytics (if enabled) — up to 2 years

2.4. Marketing

Used for targeted advertising. Require explicit consent. Currently not in use.

3. Cookie Consent

On your first visit, a consent banner allows you to manage cookie preferences. You can:

• Accept all cookie categories
• Accept essential cookies only
• Configure categories individually

Consent is stored for 12 months. You can withdraw it at any time through site settings.

4. Third-Party Cookies

Some cookies are set by third parties:

• Stripe — payment processing (stripe.com/privacy)
• Google / Firebase — authentication and analytics

We do not control third-party cookies. Please refer to their privacy policies.

5. Managing Cookies via Browser

You can manage cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies
• Firefox: Settings → Privacy & Security
• Safari: Preferences → Privacy
• Edge: Settings → Cookies and site permissions

Blocking all cookies may disrupt Service functionality (particularly authentication).

6. Local Storage and Session Storage

In addition to cookies, we use browser web storage:

• localStorage — auth tokens, profile cache, UI settings
• sessionStorage — temporary session data, drafts

This data is stored on your device only and is not shared with third parties.

7. Your Rights

Under GDPR you have the right to:

• Withdraw consent for non-essential cookies at any time
• Request information about cookies used on the site
• Lodge a complaint with ÚOOÚ: uoou.cz

8. Policy Changes

We may update this policy. For significant changes, you will see a new consent request. The last updated date is shown at the top of this page.

Cookie questions: privacy@avatarmatch.app