Cookie Notice

Effective date: 2026-05-11 Version: 1.1

Per the ePrivacy Directive 2002/58/EC (as amended by Directive 2009/136/EC) and its national implementations, placing cookies other than strictly necessary ones requires prior informed consent.

1. What are cookies?

Cookies are small text files stored on your device when you visit a website.

2. Cookies we use

Strictly necessary (no consent required)

These cookies are essential for the Service to function and cannot be switched off.

| Cookie | Provider | Purpose | Duration | |---|---|---|---| | Supabase Auth session | Supabase | Maintains your login session | Session / up to 1 week | | NEXT_LOCALE | LegalisAI | Remembers your language preference | 1 year | | Cloudflare security cookies (__cf_bm, _cfuvid) | Cloudflare | Bot protection, DDoS mitigation | Session / 30 min | | Stripe session cookies | Stripe | Required on checkout pages only | Session | | affiliate_ref | LegalisAI | Affiliate attribution — stores the referral code when a user arrives via an affiliate link (?ref=CODE). Required to correctly calculate partner commissions. | 30 days | | affiliate_session | LegalisAI | Anonymous session identifier tied to an affiliate link click | 30 days |

The affiliate_ref and affiliate_session cookies are set only when a user visits the site through an affiliate link containing the ?ref= parameter. They do not track user behaviour outside the site and contain no personal data.

Analytics cookies (require consent)

We use PostHog to analyse traffic on the site. Data is stored on EU servers. PostHog cookies are activated only after the user gives consent via the cookie banner.

| Cookie | Provider | Purpose | Duration | |---|---|---|---| | ph_* (PostHog) | PostHog (EU) | Analytics — visit counts, navigation paths, interaction events | Up to 1 year |

Analytics requests are routed through our own server (legalisai.eu/ingest) and do not reach PostHog infrastructure directly from the user's browser.

Marketing cookies

We currently do not use marketing or tracking cookies (Meta Pixel, LinkedIn Insight Tag, etc.).

3. How to manage cookies

You can control analytics cookies via the cookie banner shown on your first visit. Strictly necessary cookies cannot be disabled — blocking them in your browser may prevent the Service from functioning correctly.

4. More information

For questions about this notice: [email protected]