Cookie Policy

1. What are cookies

Cookies are small text files stored in your browser when you visit a website or web application. They allow the application to remember information about your visit — such as your login session, language preference, or theme setting.

mida by DMPF uses cookies only to ensure the functionality of the application and, with your consent, to improve your experience. We do not use cookies for advertising or to track you across other websites.

2. Categories of cookies we use

We use three categories of cookies. You can manage your preferences via the cookie settings banner shown on first visit, or at any time by clicking Reset cookie preferences.

Category	Purpose	Consent required	Retention
Essential	Login session, security tokens, basic app settings	No — always active	Session / 7 days
Functional	Language, theme (dark/light), currency preferences	Yes — opt-in	12 months
Analytics	Usage events to help improve the app (no personal data shared externally)	Yes — opt-in	12 months

3. Specific cookies and storage keys

We use localStorage (browser-side storage) rather than traditional HTTP cookies for most functionality. This is technically equivalent for GDPR purposes. Below is a full list:

Key / Cookie	Category	Purpose	Retention
sb-*	Essential	Supabase authentication session tokens	Session / 7 days
supabase.*	Essential	Supabase client state	Session
dmpf_cookie_consent	System	Stores your cookie consent preferences	12 months
dmpf_theme	Functional	Remembers dark/light theme preference	12 months
dmpf_lang	Functional	Remembers language preference (SK/CS/EN)	12 months
dmpf_currency	Functional	Remembers currency display preference	12 months
dmpf_analytics_*	Analytics	Anonymous usage event tracking (stored locally and synced to our own database only with consent)	12 months

4. Third-party cookies

We use the following third-party services that may set their own cookies or use browser storage:

• Supabase — authentication and database. Sets session tokens required for login. EU (Frankfurt) servers. supabase.com/privacy
• Stripe — payment processing. Sets cookies only on the Stripe-hosted payment page. stripe.com/privacy
• Google — OAuth login (if you choose "Sign in with Google"). Sets a session token for authentication only. policies.google.com

We do not use Google Analytics, Facebook Pixel, or any advertising-related tracking.

5. Analytics

With your consent, we track anonymous usage events (such as which features you use, when you log in, or when you export data) to help us improve the application. This data is stored exclusively in our own database (Supabase, EU Frankfurt) and is never shared with third parties for marketing purposes.

Analytics tracking is disabled by default and only activated if you accept analytics cookies. You can withdraw consent at any time by resetting your cookie preferences.

6. Managing your preferences

You can manage your cookie preferences at any time:

• In the app — click the cookie settings banner (resets automatically if you clear browser storage)
• Reset here — Click to reset cookie preferences (the banner will reappear on next page load)
• Browser settings — you can clear all cookies and localStorage via your browser's privacy settings

7. Changes to this policy

We may update this Cookie Policy to reflect changes in the cookies we use or for legal reasons. We will notify you via the in-app notification or by email at least 14 days before significant changes take effect.

8. Contact

Questions about our use of cookies: mida@dmpf-consulting.cz

For general data protection matters, see our Privacy Policy.