Avatar Match
Sign inCreate avatar

Cookie Policy

Last updated: October 10, 2026

1. What Are Cookies

Cookies are small text files a website stores in your browser. This policy lists every cookie AvatarMatch sets, what it is for and how long it lasts, in line with the EU ePrivacy Directive (2002/58/EC) and the GDPR (EU Regulation 2016/679).

Controller: Reliable Communications s.r.o.

Address: Prokopova 2856/10, 130 00, Prague, Czechia

Contact: privacy@avatarmatch.app

2. In Short

  • We use only cookies the Service needs in order to work and cookies that remember a choice you made.
  • We use no analytics, advertising or tracking cookies, and our pages carry no third-party analytics or advertising code.
  • That is why there is no cookie banner: cookies of this kind do not require consent (section 4).
  • Fonts and icons are served from our own domain: opening our pages does not make your browser contact Google Fonts or any other font service.

3. Cookies We Set

All of them are first-party cookies: they are set by avatarmatch.app, and your browser sends them only back to it.

3.1. Strictly Necessary

  • am_session — keeps you signed in. Set when you sign in and deleted when you sign out. Lifetime: 5 days, renewed while you use the Service. Not readable by scripts on the page (HttpOnly).
  • csrf_token — protects your account against requests forged by other websites (CSRF protection). Set when a page first sends a change to the Service, for example saves a setting. Lifetime: 24 hours. HttpOnly, sent only to our own pages (SameSite=Strict).
  • am_logged_out — remembers that you signed out of this browser on purpose, so that the Service does not sign you back in on its own (this matters on shared devices). It holds only the value “1”. Set when you sign out or delete your account, and deleted when you next sign in. Lifetime: up to 400 days.

3.2. Your Preferences

  • am_lang — the interface language. On your first visit it is taken from your browser's language and kept until you close the browser; once you choose a language yourself, it is kept for 1 year.
  • am_theme — the light or dark theme you chose. Kept until you close the browser.

3.3. Invitation Link

  • am_ref — set only when you open another user's invitation link (an address like avatarmatch.app/r/…). It holds that user's account identifier, so that they can be credited under the referral programme once you sign up. Lifetime: 30 days. HttpOnly. It is not used for anything else.

We set no analytics, advertising or social-media cookies, and we use no tracking pixels.

4. Why There Is No Cookie Banner

Article 5(3) of the ePrivacy Directive requires consent for cookies unless they are strictly necessary to provide a service you have asked for. The cookies in section 3 make the Service work (signing in, security) or keep a choice you made yourself (language, theme); the invitation cookie is set only when you open an invitation link yourself, and serves only to credit the person who invited you. We therefore do not ask for consent and do not show a cookie banner.

If we ever want to use a cookie that requires consent — for analytics or advertising, for example — we will update this policy first and ask for your consent before setting it.

5. Fonts and Other Services

  • Fonts and icons are stored on and served from our own servers. Your browser does not contact Google Fonts or any other font service when you open our pages.
  • Address suggestions. A few forms (an event's location, when you create events or filter them; the city in your avatar's profile) suggest addresses using Google Maps Places. While such a form is open, your browser loads that service from Google, and Google receives your IP address and what you type into the address field. Google processes this under its own privacy policy.
  • Payments are made on Stripe's checkout page, and Sign in with Google takes place on Google's pages. Those pages set their own cookies under their own policies: stripe.com/privacy, policies.google.com/privacy.

6. Storage in Your Browser

Besides cookies, the Service keeps some data in your browser's local storage, session storage and IndexedDB:

  • your language, theme and other interface choices (such as the avatar you are working with), so that a page shows them before it has finished loading;
  • your answers to a test you have not finished, so that they are not lost if the page closes;
  • your sign-in state, kept by Firebase Authentication, the sign-in service we use, and — if you turn on push notifications — the subscription for them;
  • short-lived interface state, such as a message shown once after a redirect.

This data stays on your device and is used only to make the Service work — never for analytics or advertising. Signing out removes the sign-in state; you can clear the rest in your browser settings.

7. Managing Cookies in Your Browser

You can view and delete cookies in your browser settings:

  • Chrome: Settings → Privacy and Security → Cookies
  • Firefox: Settings → Privacy & Security
  • Safari: Preferences → Privacy
  • Edge: Settings → Cookies and site permissions

If you block cookies for avatarmatch.app, you will not be able to sign in.

8. Your Rights

Under the GDPR you have the right to:

  • ask us which cookies the site uses and what they contain: privacy@avatarmatch.app;
  • lodge a complaint with ÚOOÚ (Úřad pro ochranu osobních údajů): uoou.cz.

9. Changes to This Policy

We update this policy whenever the cookies we use change; the date at the top of the page shows the last update. If we start using a cookie that requires consent, we will ask for it before setting the cookie.

Cookie questions: privacy@avatarmatch.app