Cookie Policy

What cookies are

Cookies are small text files stored in your browser or on your device. Other browser storage, such as local storage, works in a similar way. In this policy we call all of them "cookies".

MingleAway is a platform where travelers post trips and others find them and join. Cookies help us keep you signed in, remember your settings and, only if you agree, understand which parts of the service are useful.

Who is responsible

The controller is [full legal name of the provider], [address], [country], [registration number]. Contact: [contact address]. For more on how we process personal data, see the Privacy Policy.

Necessary storage

This storage is needed to run the service and to provide what you ask for, such as staying signed in. We use it based on our legitimate interest (Art. 6(1)(f) GDPR) and it does not need your consent.

• sb-…-auth-token (local storage): keeps you signed in. It holds the access and refresh tokens from our authentication provider, Supabase. Kept until you sign out or the session expires.
• sb-…-auth-token-code-verifier (local storage): secures sign-in and e-mail links (account confirmation, password reset, sign-in with Facebook) with a one-time code that works only in this browser. Kept until sign-in finishes.
• roamtogether_consent_v1 (local storage): remembers your choice about analytics cookies. Kept until you change it or clear your browser data.
• roamtogether_language_v1 (local storage): remembers the language you chose, Polish or English. Kept until you change it or clear your browser data.
• roamtogether_explore_view_v1 (local storage): remembers the layout you chose for browsing trips. Kept until you change it or clear your browser data.
• Cache storage (service worker): copies of the app files, so the app loads faster. No personal data. Kept until a new version replaces them or you clear your browser data.

Analytics cookies

Analytics cookies help us understand which pages are used most and what to improve. The data is used as statistics. [Name of the analytics tool and its provider: add once chosen.]

They load only after you agree (Art. 6(1)(a) GDPR) and stay off until you decide. Consent is voluntary: declining or withdrawing it does not limit your use of the service.

Trip counters (no cookies)

Opening a trip and sharing its link are counted on our servers, separately for each trip and day. This uses no cookies or other identifiers on your device, so it does not depend on your cookie choice. The organiser of the trip sees the numbers.

No advertising cookies

We do not use advertising or tracking cookies and we do not sell data about your activity to advertisers.

Third-party content and services

Third-party cookies are the responsibility of those providers; please read their privacy policies.

• Unsplash photos: some photos are loaded from Unsplash servers (images.unsplash.com). Your browser then sends Unsplash a request for the image, including your IP address. We set no cookies of our own for this.
• Sign-in with Facebook: if you choose to sign in or link your account with Facebook, you are sent to Facebook, which may set its own cookies as described in its policy. Your Facebook profile photo may be shown from its servers.
• Hosting and database: the service runs on Vercel infrastructure and account and trip data is stored with Supabase. They may process technical data, such as your IP address and request logs, needed to run and secure the service.

How to manage your choices

In the service, select "Cookie settings" in the footer. You can switch analytics cookies on or off at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before it was withdrawn.

In your browser, you can delete stored data or block cookies and local storage in the settings. Blocking necessary storage may prevent you from signing in.

If your browser blocks local storage, the service still works, but your choices are not remembered and the cookie banner shows again on your next visit.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing based on legitimate interest, and to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (uodo.gov.pl). See the Privacy Policy for details and how to contact us.

Changes to this policy

We may update this policy, for example when we add new tools. The date of the last update is shown at the top of the page. If a change affects cookies that need consent, we will ask for it again.