This translation is provided for information only. The Polish version is legally binding.
Cookie Policy
Last updated: 14 October 2026
In short: almost all our cookies are technical and necessary for the service to work – none of them is for advertising or analytics, and the law (Art. 399 of the Electronic Communications Law (Prawo komunikacji elektronicznej)) doesn't require consent for cookies that the service you requested simply wouldn't work without. Two additional ones – work-wizyta and work-polecenie – are not necessary for the service to work (described in the table below). On your first visit we show a short cookie notice at the bottom of the screen with an "I understand" button.
Cookies we use
| Name | What for | How long |
|---|---|---|
work_session | Keeps you logged in. Without it you'd have to enter your password with every click. | Until you log out or the session expires (up to 30 days) |
work_share_<link id> | Only saved when you open a link to a shared lesson – gives access to that single note without logging in. | Up to 6 hours (shorter if the link expires or is turned off earlier) |
work_help | Only saved when you write to the Helper (help chat at /pomoc) without logging in – a random signed identifier that lets you return to the same conversation and enforces a daily message limit. Sent only to help chat routes. | 30 days |
work-paleta | Remembers your chosen colour palette ("Blue" or "Classic") so the page displays in your colours immediately – even after logging out. Just the choice, no tracking. | One year (renews with each change and login) |
work-jezyk | Remembers your chosen page language so it opens in that language and doesn't suggest another – even after logging out. Just the choice, no tracking. | One year (renews with each change and login) |
work-wizyta | A marker that this browser has already been on the site – contains only "1", no identifier. | 400 days |
work-polecenie | Remembers the code of the partner link through which you first came to the site – contains only that code, nothing about you (details in the privacy policy). | 30 days (or until you log in) |
work-cookies-info | Remembers that you clicked "I understand" under the cookie notice so we don't show it on every visit. Contains only "1". | One year |
Except for work-wizyta and work-polecenie, all are necessary for the functions they support, so the law doesn't require consent. All are set as sameSite=lax (they don't travel with requests from other sites), and in production also secure (HTTPS only). work_session, work_share_…, work_help, work-wizyta, and work-polecenie are additionally httpOnly (no script on the page can read them). work-paleta, work-jezyk, and work-cookies-info don't have that flag – but they only store a palette choice, language code, or "1".
Browser storage (localStorage)
Besides cookies we save a few things in your browser's persistent storage. These are appearance and convenience settings – they don't go to the server and only you can see them:
- chosen theme (light / dark / auto),
- whether the side panel is collapsed,
- whether the assistant should take longer on answers,
- whether we've shown the warning that you're nearing a plan limit (so it doesn't pop up on every visit),
- anti-bot token (antybot:m:…) – described below,
- unsent drafts (cf-szkic:…): a message to the assistant, a note or a new task you are writing – so they are not lost when the page refreshes, the tab closes or the service is updated; a draft disappears once sent or saved, and after 14 days at the latest.
Clearing site data in your browser deletes all of them – the service still works.
Tab storage (sessionStorage)
One thing is saved only while a browser tab is open and disappears when you close it: whether you've already dismissed the reminder banner to confirm your email. This also stays only with you. Also, on a phone, a short marker that after confirming your address the page tried to open the ClassFlowy app – so that if the app isn’t installed, the page can still show “done” when you come back. After a service update the page also stores when it last refreshed itself (cf-przeladowano), so it never refreshes in a loop.
What we DON'T do
- We don't have Google Analytics or any other analytics.
- We don't have ads or ad cookies.
- We don't track you across other sites or build a profile.
- We don't embed social media buttons that would watch your traffic.
- Except for Anty Bot, the page doesn't fetch scripts, fonts, or stylesheets from other servers.
Anti-bot protection
Login, registration, and password reset are protected by Anty Bot (antybot.biskupski.site) openly – it can reject an attempt it sees as a bot. In the background, without blocking anyone, the same mechanism also watches assistant messages and material uploads (transcription, photo reading) to catch automated limit abuse. It checks the first message to the Helper on the public site silently, once per conversation – without an account it can reject it. In both cases it only gets technical browser signals and your IP address – never the content of your materials or conversations.
The Anty Bot script loads from antybot.biskupski.site only on login, registration, and password reset screens, and in the app after logging in, and from documents only on the /pomoc page (Helper chat), not on the homepage or other documents. It doesn't set any cookies. After successful verification it saves a token antybot:m:… in your browser's storage, which it sends with the next verification – this helps distinguish a browser that already passed verification from a bot. It's used only to protect against abuse, not for ads or tracking.
How to delete cookies
Easiest: log out – this deletes work_session (and logging in deletes work-polecenie). You can also clear site data in your browser settings or block cookies for this site – but then login and opening shared links won't work. The two cookies that aren't necessary (work-wizyta and work-polecenie) you can delete at any time – the service works normally without them.