Cookies

Otack Pages — operated by Goup Space Sp. z o. o.

Effective date: 2026-05-29

1. Scope and operator

This Cookie Policy applies to the Platform at pages.otack.eu. It covers cookies and browser storage set by the Platform itself. Websites generated and published by Users through the Platform have their own cookie posture, governed by the User as data controller of that site.

Operator: Goup Space Sp. z o. o., ul. Hoża 86/210, 00-682 Warszawa, Poland, KRS 0000932799, REGON 520583134, NIP 7011061440, e-mail info@otack.eu.

2. Cookies and storage in use

Usage differs by area of the Platform:

2A. Public area (pages accessible without login)

The following are loaded only after the User clicks "Accept" on the consent banner. Clicking "Decline" prevents them from being set.

  • _ga, _ga_* — Google Analytics 4 (Google Ireland Ltd. / Google LLC). Measures traffic and behaviour on public pages. Duration: 2 years. Legal basis: consent (GDPR Art. 6(1)(a); Prawo telekomunikacyjne Art. 173).
  • _fbp — Facebook Pixel (Meta Platforms Ireland Ltd.). Measures advertising campaign effectiveness. Duration: 90 days. Legal basis: consent (GDPR Art. 6(1)(a); Prawo telekomunikacyjne Art. 173).

2B. Authenticated area (post-login pages)

No analytics or marketing cookies are set after login. Only strictly necessary items are used:

  • WGSESS_{port} — session authentication cookie. HttpOnly, Secure, SameSite=Lax. Duration: session.
  • csrf_token — anti-CSRF token stored inside the server session; not a separate browser cookie.
  • wg_keys_pwd, wg_keys_mask (sessionStorage) — in-browser AI-key decryption data. Cleared when the tab closes.
  • wg_keys_blob_local, wg_keys_mode (localStorage) — encrypted AI-keys blob and storage mode. Persistent until the User resets them.
  • wg_key_openai, wg_key_claude, wg_key_gemini, wg_key_moonshot (localStorage — deprecated) — legacy key slots no longer written by the platform; will be removed in a future release.

2C. Registration page

  • hCaptcha (Intuition Machines, Inc.) — bot detection. Strictly necessary. Domain: hcaptcha.com. See hcaptcha.com/privacy.

3. Legal basis and consent

  • Public area: analytics and marketing cookies require your consent. The banner is shown on first visit; cookies are set only after "Accept". Withdraw consent at any time by clearing cookies in your browser (see §4).
  • Authenticated area and registration: all items are strictly necessary. No consent banner is shown.

4. Managing cookies

Clear or block cookies via browser settings:

  • Chrome: chrome://settings/cookies
  • Firefox: about:preferences#privacy
  • Safari: Preferences → Privacy
  • Edge: edge://settings/content/cookies

Blocking the session cookie prevents login. Blocking hCaptcha prevents registration. Declining analytics has no effect on Platform functionality. Clearing localStorage removes stored AI keys — they must be re-entered.

5. Contact and changes

Questions: info@otack.eu. Related documents: Privacy Policy, Terms of Service, Data Processing Agreement.

Material changes will be announced at least 14 days in advance. The English version is the master version. In case of any conflict between translations, the English version prevails, subject to mandatory provisions of the law applicable to the User's place of residence.

Goup Space Sp. z o. o. · ul. Hoża 86/210, 00-682 Warszawa · KRS: 0000932799 · info@otack.eu · /cookies