01 Who is responsible for this site
Undernapse Sp. z o.o., with its registered office at ul. Hoża 86 lok. 410, 00-682 Warszawa, Polska, NIP 7011145585. We decide which technologies the site uses and why. How personal data is processed is described in the Privacy Policy.
- Controller
- Undernapse Sp. z o.o.
- Legal form
- limited liability company
- Address
- ul. Hoża 86 lok. 410, 00-682 Warszawa, Polska
- NIP
- 7011145585
- REGON
- 525353982
- KRS
- 0001037160
- hello@undernapse.com
03 Legal basis and consent
Under Article 399 of the Polish Electronic Communications Act (Prawo komunikacji elektronicznej, PKE), storing information or accessing information already stored in your terminal equipment requires clear and comprehensive information about the purpose and the entity beforehand, plus your consent. Consent is not required only for information strictly necessary to provide a service you have explicitly requested — that is, the technologies described below as necessary.
Consent is voluntary, specific, and can be withdrawn as easily as it was given. We do not use consent walls: access to the content, the contact form and call booking does not depend on whether you agree to analytics.
We store your decision so that we do not ask again on every page. We keep a decision for 180 days; after that we treat it as stale and ask again. You can change it earlier, at any time.
04 Consent categories
The consent panel has two categories. There is no marketing category — there is nothing to opt into. Cloudflare Web Analytics does not appear in the panel because it neither stores nor reads anything on your device, so it needs no consent.
- Necessary (always on)
- Technologies needed for the site to work and to remember your consent decision. Without them the site could not respect your choice, so they do not rely on consent and cannot be switched off in the panel. You can block them in your browser settings, although parts of the site may then behave differently.
- Analytics (off by default)
- Google Analytics 4 — visit statistics that help us judge which pages are read and where the content needs work. We enable it only with your consent. Before consent we load no Google script and set no _ga cookies.
Refusing analytics consent does not restrict access to any part of the site. If analytics happens to be switched off on our side in a given deployment, we set no analytics cookies at all and there is no consent to manage.
05 Storage we use
This is the complete list of technologies set by our own code. The site itself sets no other cookies. Outside this table runs Cloudflare Web Analytics — it sets no cookies and no local storage, which is why it is absent here and needs no consent.
| Name | Provider | Purpose | Category | Lifetime |
|---|---|---|---|---|
| undernapse_consent (local storage) | Undernapse | Stores your decision: record version, date and whether analytics consent is on | Necessary | Until you clear browser data; a decision older than 180 days is ignored |
| undernapse_consent (first-party cookie) | Undernapse | A copy of the same record as an encoded cookie; attributes: path /, SameSite=Lax, Secure over HTTPS | Necessary | 180 days |
| _ga | Google Ireland Limited | Distinguishing users in GA4 statistics | Analytics — after consent only | 2 years |
| _ga_<identifier> | Google Ireland Limited | Maintaining session state in GA4 | Analytics — after consent only | 2 years |
The analytics rows describe a build with analytics enabled. _ga cookies appear only after consent is given, and when consent is withdrawn we delete them together with leftovers from earlier Google tools (_gid, _gat, _gcl, _gac).
Cloudflare — our hosting and attack-protection provider — may set technical cookies necessary for connection security and bot protection. They are not used to track you across sites and fall under the necessary category.
06 Google Analytics 4 and Consent Mode
GA4 is provided by Google Ireland Limited, and data may be processed by Google LLC in the United States under the EU-US Data Privacy Framework and standard contractual clauses. The Privacy Policy describes the transfer safeguards in detail.
The site uses Google Consent Mode v2. Before your decision, analytics and advertising signals are set to “denied”, so we set no analytics cookies and send no events. Advertising signals stay denied at all times — we have no advertising tags.
In GA4 reports we have no access to your IP address or to contact-form message content. Analytics data is kept in the tool for 14 months.
Besides the consent panel, you can limit analytics through browser settings and script-blocking extensions. If you block Google scripts at browser level, GA4 will not run regardless of the panel settings.
07 How to change or withdraw consent
You can change or withdraw consent in three ways. All of them take effect immediately and none requires contacting us.
- Cookie settings panel — open it with the “Back to cookie settings” button on this page or the link in the footer. Toggle the analytics category and save your decision.
- Browser settings — in the privacy or cookies section you can block or delete cookies for this and other sites. Browsers also offer private mode, which clears data when the window closes.
- Clearing stored data — clearing site data in your browser removes both the cookie and the local storage entry. After a refresh we will ask for consent again.
Withdrawal works going forward: we stop loading the GA4 script and delete the _ga cookies. Events collected earlier remain in aggregate statistics and cannot be attributed to a specific person. Withdrawal does not affect the lawfulness of earlier processing.
If analytics is switched off in a given deployment, the consent panel is not displayed and browser settings remain the only place to manage third-party cookies.
08 The site works without consent too
We use no consent walls and never make access conditional on consent. Every page, all content, the contact form and call booking work without analytics. The only difference is on our side: we cannot see which content is being read.
The cookies necessary to remember your decision stay stored until you delete them — without them the site would ask for consent on every refresh.
09 Changes to this policy
We update this policy when we change analytics tools, providers or the way consent is managed. Every version carries a number and a date; the history is available on request.
- Version 1.0 — effective from 10 November 2026. First version of the document.
If a change introduces a new category or a new provider, we will ask for consent again before anything is stored.
10 Contact
Questions about cookies, consent or withdrawing it should go to:
- Data protection contact
- hello@undernapse.com
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl — the supervisory authority that deals, among other things, with consent to storing information in terminal equipment.
In the event of any discrepancy between the Polish and English versions, the Polish version prevails. The rules on personal data processing are set out in the Privacy Policy.