Skip to content

Cookie policy

Last updated: October 15, 2026

Draft – this text requires client and legal review.

1. In short

Najdimo uses only a few cookies and similar storage items. Most are necessary for the service to work at all. We switch on analytics only with your consent.

  • Necessary items work without consent: your cookie choice, sign-in, language, report drafts and the private link to a report.

  • Google Analytics sets the cookies _ga and _ga_PKY4SCX3RL only if you accept.

  • There are no advertising or tracking cookies. We count ad impressions and clicks in aggregate and without cookies.

  • You can change or withdraw your choice at any time through "Cookie settings" in the page footer or in the app settings.

2. What cookies and similar storage are

A cookie is a small file that a website saves in your browser. We treat similar items (the browser's local storage, secure storage in the app) the same way. In this text we call them all "items".

We split items into two kinds:

  • necessary: without them the service does not work or cannot do what you asked for. We do not need consent for them;

  • analytics: they measure how the service is used. We set them only with your consent.

3. Items on the website

NameProviderPurposeCategoryDuration

zz_consent (cookie)

NajdimoStores your cookie choice, the text version and the time of the choice.necessary12 months

sb-<project>-auth-token (cookie; may be split into .0, .1)

Najdimo (Supabase)Keeps you signed in.necessaryup to 400 days or until you sign out [client: verify actual duration]

NEXT_LOCALE (cookie)

NajdimoRemembers the language you chose.necessary[client: verify duration, likely session]
Report draft (local storage)NajdimoSaves an unfinished report so you do not lose it.necessaryuntil you submit the report or discard the draft

manage:<report id> (local storage)

NajdimoHolds the private-link token that lets you manage a report without an account.necessaryuntil the report closes or storage is cleared

manage_token (session storage)

NajdimoTemporarily holds the private-link token from the /m address so a page reload does not lose it.necessaryuntil the tab closes
Device identifier (local storage)NajdimoRandom identifier for abuse limits (rate limiting).necessaryuntil storage is cleared
"Not a robot" check (Turnstile)Cloudflare, Inc.

Tells people from bots using technical device and browser signals. Not used for advertising. [client: verify whether it sets cookies]

necessaryper the provider's rules

_ga (cookie)

Google Ireland LimitedDistinguishes users for visit statistics.analytics2 years

_ga_PKY4SCX3RL (cookie)

Google Ireland LimitedKeeps session state in Google Analytics 4.analytics2 years

We set the two analytics cookies only if you accept. We keep data in Google Analytics for 14 months.

4. Items in the mobile app

NameProviderPurposeCategoryDuration
Cookie choice (device secure storage)NajdimoStores your choice, the text version and the time.necessary12 months
Sign-in session (app storage)Najdimo (Supabase)Keeps you signed in.necessaryuntil you sign out [client: verify duration]
Push notification tokenNajdimo; Apple and Google carry the notificationsSends notifications once you allow them on your device.necessaryuntil you turn notifications off or remove the app
Private-link token (secure storage)NajdimoManages a report without an account.necessaryuntil the report closes or the app is removed
Device identifierNajdimoAbuse limits.necessaryuntil the app is removed
Drafts and reports waiting to be sentNajdimoKeeps an unfinished report, and a found-animal report made offline until we send it.necessaryuntil the report is sent or the draft discarded; deleted on sign-out
Copy of public reports nearbyNajdimoLets the map and list work offline. Approximate areas and small photos only.necessaryat most 7 days and 50 MB; deleted on sign-out
Areas for alerts when you are nearbyNajdimo (checked by the phone's operating system)

Your phone alerts you when you enter the approximate area of a lost pet. Only if you turn the feature on.

necessaryuntil the search closes or you turn the feature off
App-instance identifier (Firebase Analytics)Google Ireland LimitedTells installations apart for usage statistics.analyticsper the provider's rules; we keep data in Google for 14 months [client: verify]

We create the Firebase Analytics identifier only after you consent.

5. What we do not use

  • There are no advertising or tracking cookies. All four Google consent settings are denied by default. If you accept, we grant only analytics_storage.

  • We count ad impressions and clicks in our own database, in aggregate and without cookies. We store nothing on your device for it.

6. Third-party services

  • Stripe. Payment takes place on Stripe's page (Stripe Checkout). Stripe's cookie and privacy policies apply there.

  • Map and place search. Map tiles (OpenFreeMap) set no cookies, but they can see your IP address. Place search runs on our servers and sets no cookies.

  • Sign-in with Google or Apple. The rules of the provider you choose apply at sign-in.

More about these providers is in the privacy policy.

7. How your choice works

  • Until you decide, we load no Google script, send no request to Google and set no Google cookie (basic Consent Mode v2).

  • If you decline or choose nothing, the service works the same. Nothing is locked.
  • If you accept, we grant only analytics_storage.

  • We ask you again after 12 months or when providers or purposes change.

8. How to change or withdraw your choice

At any time, open "Cookie settings" in the page footer or in the app settings and change your choice. Withdrawal takes effect at once, and we delete the _ga cookies at that moment. You can also delete cookies in your browser settings; necessary items are created again when the service needs them, but drafts are lost.

9. Changes

We update this text when we add or remove an item or a provider. The date of the last update is at the top of the page. For an important change we ask for your choice again.

10. Contact

Questions: [email protected]. General information about data processing:

privacy policy.