쿠키 정책

Version 1.0

§1. Scope

This Policy describes the cookies and similar technologies used on the SplitTeach service.
The scope of technologies used may change as the Platform develops – the current version of this Policy is always available on the Platform.

§2. Necessary technologies

SplitTeach uses technologies necessary for logging in, maintaining sessions, security, preventing abuse and the proper functioning of the Platform.
Necessary technologies are used to the extent permitted without separate consent – blocking them may prevent use of the Platform.

Example necessary cookies (names to be confirmed against the actual backend implementation):

Name (example)	Provider	Purpose	Retention period	Consent?
session_id / similar	SplitTeach	Keeping a logged-in User's session active	Browser session (deleted on closing it) or until logout	No
csrf_token / XSRF-TOKEN	SplitTeach	Protection against CSRF attacks (form security)	Browser session	No
auth / refresh_token	SplitTeach	Keeping the User logged in between visits (a "remember me" feature, where available)	To be confirmed – typically from a few hours (access token) to 30 days (refresh token)	No
cookie_consent	SplitTeach	Remembering the User's choice in the cookie banner	12 months	No (this cookie only stores the consent decision itself)

§3. Google Analytics – list of cookies

SplitTeach uses Google Analytics to analyse how the Platform is used and to improve it.
Where a particular use requires consent, the tool is only activated after the User has given consent, in accordance with §4.

Standard Google Analytics 4 cookies (names and periods matching gtag.js's default configuration – to be confirmed against the actual implementation):

Name (pattern)	Provider	Purpose	Retention period	Consent?
_ga	Google LLC	Distinguishing unique users (client identifier)	13 months (GA4 default) or 24 months (older configuration)	Yes
_ga_<stream identifier>	Google LLC	Maintaining GA4 session state for a specific service/data stream	13 months	Yes
_gid	Google LLC	Distinguishing users (older pattern, may not appear in a pure GA4 configuration)	24 hours	Yes
_gat / _gat_gtag_<id>	Google LLC	Throttling the number of requests sent to Google Analytics	1 minute	Yes

Google LLC processes data within Google Analytics in accordance with its own privacy policy. Data may be transferred outside the European Economic Area – Google provides appropriate safeguards for such a transfer (standard contractual clauses), in accordance with information published by Google.

§4. Managing consent

Where consent is required, the User may give it, refuse it, or withdraw it using the consent-management mechanism available on the Platform (e.g. a cookie banner or privacy settings).
Refusing consent is just as easy as giving it – a single action, with no need to go through additional screens.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
The User may additionally manage cookies through their web browser's settings, including by deleting or blocking them – which may affect the Platform's functionality in the case of necessary cookies.

§5. Transfers of data outside the European Economic Area

Data collected via analytics cookies (Google Analytics) may be transferred to Google LLC, based in the USA. The transfer takes place on the basis of mechanisms provided for by the GDPR (standard contractual clauses or another appropriate mechanism used by Google). Necessary cookies (§2) are processed by SplitTeach and are not, in this respect, transferred outside the European Economic Area, provided SplitTeach does not use a foreign infrastructure provider – this assumption needs to be confirmed against the actual hosting provider.

§6. Updates

Before deploying new technologies requiring consent, SplitTeach updates the consent mechanism and this documentation.
The current version of the Cookie Policy is always available on the Platform.