Cookie Policy
Last updated: January 27, 2025
1. What Are Cookies?
Cookies are small text files that are placed on your device when you visit a website. They help websites remember your preferences, improve functionality, and provide analytics about site usage.
This Cookie Policy explains how Haroo Chat uses cookies and similar tracking technologies in compliance with the EU GDPR and Czech Electronic Communications Act (as amended in 2022).
2. Your Cookie Consent
In accordance with Czech law, we use an opt-in consent system for non-essential cookies. When you first visit our site:
- Essential cookies are set automatically (required for site functionality)
- You will be asked to consent to optional cookies (analytics, preferences)
- You can manage your cookie preferences at any time in settings
- Withdrawing consent will not affect the lawfulness of processing before withdrawal
3. Types of Cookies We Use
3.1 Essential Cookies (Strictly Necessary)
Consent Required: No (essential for service operation)
These cookies are necessary for the website to function and cannot be disabled:
- Authentication cookies: Keep you logged in (Supabase auth tokens)
- Session cookies: Maintain your session state
- Security cookies: Prevent CSRF attacks and ensure secure connections
- Load balancing cookies: Distribute traffic efficiently
Duration: Session or up to 30 days
3.2 Functional/Preference Cookies
Consent Required: Yes (opt-in)
These cookies remember your preferences and choices:
- Language preferences: Remember your selected language
- Theme settings: Store dark/light mode preference
- UI preferences: Remember layout customizations
- Content preferences: NSFW content filter settings
Duration: Up to 1 year
3.3 Analytics Cookies
Consent Required: Yes (opt-in)
These cookies help us understand how users interact with our service:
- Usage analytics: Track page views, feature usage, performance metrics (PostHog, Google Analytics)
- Error tracking: Monitor and fix technical issues (Sentry)
- A/B testing: Test and improve features (PostHog feature flags)
- User identification: Anonymous session tracking
Third Parties: PostHog (EU region), Google Analytics, Sentry (EU region)
Privacy Note: PostHog respects Do Not Track (DNT) signals and has session recording disabled for privacy
Duration: Up to 2 years
3.4 Fraud Prevention Cookies
Consent Required: No (legitimate interest - security)
These cookies help us detect and prevent fraudulent activity:
- Device fingerprinting: Identify unique devices to prevent abuse (FingerprintJS v4.6.2)
- Referral tracking: Monitor referral program integrity and prevent fraud
- Rate limiting: Prevent automated attacks
- Multiple account detection: Prevent crystal economy abuse
Technology: @fingerprintjs/fingerprintjs (browser fingerprinting library)
Duration: Up to 90 days
4. Third-Party Cookies
We use the following third-party services that may set their own cookies:
Stripe (Payment Processing)
Purpose: Secure payment processing and fraud prevention
Privacy Policy: stripe.com/privacy
Supabase (Backend Services)
Purpose: Authentication, database, and analytics
Privacy Policy: supabase.com/privacy
PostHog (Product Analytics) - EU Region
Purpose: Product analytics, A/B testing, and feature flags
Server Location: EU (eu.i.posthog.com)
Privacy Features: DNT respected, session recording disabled, autocapture disabled
Privacy Policy: posthog.com/privacy
Sentry (Error Tracking) - EU Region
Purpose: Error monitoring, performance tracking, and debugging
Server Location: EU (de.sentry.io)
Data Collected: Error messages, stack traces, session replays (10% sampling)
Privacy Policy: sentry.io/privacy
Google Analytics 4 (when consent provided)
Purpose: Website analytics and conversion tracking
Consent: Required before activation (production only)
Privacy Policy: policies.google.com/privacy
FingerprintJS (Fraud Prevention)
Purpose: Device fingerprinting to prevent fraud and abuse
Data Collected: Browser characteristics, device attributes
Privacy Policy: fingerprint.com/privacy-policy
5. How to Manage Cookies
5.1 In-App Cookie Settings
You can manage your cookie preferences at any time:
- Go to Settings → Privacy → Cookie Preferences
- Toggle individual cookie categories on/off
- Changes take effect immediately
5.2 Browser Settings
You can also control cookies through your browser settings:
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Cookies and site permissions
Note: Blocking essential cookies may prevent the website from functioning properly.
5.3 Opt-Out Tools
For analytics and advertising cookies, you can use:
6. Do Not Track Signals
Some browsers support "Do Not Track" (DNT) signals. We respect DNT signals through our PostHog configuration, which automatically disables tracking when DNT is enabled in your browser. Additionally, we honor your cookie preferences set within our platform.
PostHog DNT Configuration: Our analytics system (PostHog) is configured with respect_dnt: true, ensuring that users with Do Not Track enabled in their browsers will not be tracked.
7. Local Storage and Similar Technologies
In addition to cookies, we use:
- Local Storage: Store UI preferences and cached data (not sent to servers)
- Session Storage: Temporary data cleared when you close the browser
- IndexedDB: Store larger datasets for offline functionality
You can clear this data through your browser's "Clear browsing data" option.
8. Updates to This Policy
We may update this Cookie Policy to reflect changes in technology or legal requirements. Significant changes will be communicated via email or platform notification.
9. Contact Us
For questions about cookies or this policy, contact us at:
Email: info@click-click.cz
Data Protection Officer: info@click-click.cz