Sanqto
home legal documents cookie policy
Legal documents

Cookie policy

Effective from: 2026-05-03

This cookie policy explains which cookies and similar technologies the website sanqto.com (the "Site") uses, and what settings and rights are available to visitors.

The short version: the Site uses only cookies that are strictly necessary for it to work (session, CSRF protection) and — with your consent — anonymous visit statistics. We do not use third-party advertising cookies and we do not sell data to anyone.
§ 1

What cookies are

  1. Cookies are small text files written by a web browser to the device of a Site visitor (computer, phone, tablet).
  2. They make it possible to keep a user session alive (after sign-in), remember preferences, and analyse Site traffic.
  3. Some cookies are set directly by Sanqto (first-party cookies), others — only with your consent — by analytics providers (third-party cookies).
§ 2

Cookies used on the Site

A. Strictly necessary cookies (no consent required — Art. 173(3) of the Polish Telecommunications Act):

  1. sanqto_cms — session identifier for the CMS panel and contact form. Purpose: keep an admin signed in and hold the CSRF token that protects forms. Lifetime: until the browser closes. Session cookie, HttpOnly, SameSite=Lax.
  2. csrf_token — token protecting the contact form against CSRF. Lifetime: session.
  3. sanqto_locale — remembers the language you chose so we don't override it on the next visit. Lifetime: 1 year. SameSite=Lax.

B. Analytics cookies (require consent):

  1. [OPTIONAL — IF DEPLOYED] _pk_id.*, _pk_ses.* — Matomo (self-hosted, data stored in the EEA). Purpose: anonymous visit statistics. Lifetime: up to 13 months.
  2. [OPTIONAL — IF DEPLOYED] _ga, _ga_* — Google Analytics 4. Purpose: traffic analysis. Lifetime: up to 24 months.

C. Marketing / advertising cookies: Sanqto does not use cookies for ad profiling or retargeting.

Note before launch: if analytics are deployed, add a consent banner and reflect that here. The current CMS does not inject any external cookies.
§ 3

Consent and withdrawal

  1. You give consent to analytics cookies by clicking "Accept" in the consent banner or actively configuring the consent panel.
  2. You can withdraw consent at any time by changing the consent settings ("Cookie settings" link in the Site footer) or clearing cookies in your browser settings.
  3. Withdrawal does not affect the lawfulness of processing carried out under consent before withdrawal.
§ 4

Managing cookies in your browser

You can configure cookie handling in your browser yourself — block, restrict, or delete them. Instructions for popular browsers:

  1. Google Chrome — Settings → Privacy and security → Cookies;
  2. Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data;
  3. Safari — Settings → Privacy → Cookies;
  4. Microsoft Edge — Settings → Cookies and site permissions.

Blocking strictly-necessary cookies may break Site features (for example sign-in to the CMS or the CSRF-protected contact form).

§ 5

Other technical data

  1. The Site server logs standard technical data on every HTTP request: IP address, date and time, URL path, response code, browser user-agent. These are kept for up to 30 days and used solely for Site security and error diagnostics.
  2. Legal basis: GDPR Art. 6(1)(f) — legitimate interest in keeping the Site secure and operational.
§ 6

Changes to this Cookie Policy

  1. We notify changes by updating this document on the Site and, for material changes, with a highlighted notice on the Site.
  2. The current version is in force from 3 May 2026.
  3. For cookie-related questions, contact us at privacy@sanqto.com.
See demo