🍪 Cookies and local storage

Cookie Policy

Last updated: 13 September 2026

§ 1. What are cookies and local storage?

Cookies are small text files saved on your device by a website's server. Local storage is a similar browser mechanism in which the portal saves your settings without sending them to the server. They allow your session to be recognised and content to be adapted to your preferences.

Legal basis: the ePrivacy Directive (2002/58/EC), Article 173 of the Polish Telecommunications Law (Prawo telekomunikacyjne) and Article 6 of the GDPR.

§ 2. Categories of cookies and local storage on the portal

🔒 Essential — always active, cannot be disabled

Name	Purpose	Duration
`neurogpt_session`	Session token of the logged-in user (HttpOnly, Secure)	7 days
`neurogpt_csrf`	Protection of forms against CSRF attacks	session
`NEXT_LOCALE`	Remembered language (Polish / English)	12 months
`__cf_bm`, `cf_clearance`	Bot and attack protection (Cloudflare)	up to 30 min / 1 year

💾 Local storage — essential, never leaves the device

Name	Purpose	Duration
`neurogpt_consent_v2`	Your choice of consent to analytics and marketing cookies	until changed
`theme`	Light / dark / night theme	until changed
`neurogpt_stopwatch_v2`, `neurogpt_chat_mode`	Running episode stopwatch, selected assistant mode	until finished
`neurogpt_passed_`, `neurogpt_completed_`, `neurogpt_certificate_name`	Quiz and scenario progress, name on the certificate	until cleared
`neurogpt_onboarding_*`	Dismissal of the onboarding wizard	until cleared
`neurogpt_quick_start`	The “Seizure in progress” / “Meltdown in progress” lock-screen button is switched on (the phone shows the notification itself, without our server)	until switched off
`neurogpt_auto_camera`, `neurogpt_recording_pending`, `neurogpt_stopwatch_entry`	Camera together with the stopwatch; a recording description waiting to be attached to an entry (file name, length, markers — never the video itself)	until changed / until attached
IndexedDB `neurogpt-nagrania`	Recordings of a seizure or episode — they stay on the phone and never reach our server	until you delete them
`neurogpt_witness_stopwatch` (session storage)	Witness stopwatch on the public action plan card	until the tab is closed

📊 Analytics — require consent

Provider: Google LLC (Google Analytics 4) — IP address anonymised, data processed in the EU. Google Privacy Policy →. We also use Cloudflare Web Analytics — cookie-free measurement without user identifiers, which does not require consent.

Name	Purpose	Duration
`_ga`	Distinguishes users (anonymously)	2 years
`_ga_*`	GA4 session state	2 years

📣 Marketing — require consent

Provider: Meta Platforms, Inc. (Meta Pixel) — allows us to reach people looking for support for loved ones on the autism spectrum. Meta Privacy Policy →

Name	Purpose	Duration
`_fbp`	Meta Pixel identifier	3 months
`_fbc`	Tracking of clicks from ads	1 year

§ 3. How to manage your consents?

You can change your preferences at any time:

On our portal: click "Manage cookies" in the page footer
In your browser: Settings → Privacy → Cookies and site data (deleting site data also clears local storage)
Chrome: Settings → Privacy and security → Cookies
Firefox: Settings → Privacy & Security
Safari: Settings → Safari → Privacy

Opting out of analytics and marketing cookies does not affect the functionality of the portal. The Google Analytics and Meta Pixel scripts are loaded only after consent has been given.

§ 4. Contact

For matters concerning cookies, contact us at:
📧 kontakt@neurodzieci.pl
Fundacja NeuroDzieci, ul. Rembrandta 4a/39, 03-531 Warsaw, Poland