Cookie notice
Spark Tutor uses only cookies that are strictly necessary to run the site. You do not need to consent to them. This notice is here so you can see what they are.
This document is available in English and Polish; both language versions have equal force. In case of any discrepancy, the interpretation more favourable to the consumer applies.
Sign-in cookies
On a laptop and on a preview deploy, demo sign-in sets a first-party cookie named spark_session. It is httpOnly and SameSite=Lax, and it is marked Secure when the site itself is served over HTTPS. It remembers who is signed in. It is strictly necessary.
In production, sign-in uses Supabase Auth. That sets first-party cookies whose names look like sb-<project>-auth-token, including numbered parts if the session is split, and a code-verifier cookie during the email link. They are strictly necessary for the session. Preview and local development do not call the live Supabase project.
Confirmation message
After you follow an email confirmation link, the site sets a first-party cookie named spark_toast for about two minutes so the next page can show that the email was confirmed. The page then deletes it. It is not used for analytics or advertising. It is strictly necessary to deliver that one message.
Stripe
Pay now sends you to Stripe Checkout on Stripe’s own domain. This site does not load Stripe.js and does not set a Stripe cookie. Stripe may set cookies on its domain to take the payment. Those cookies are Stripe’s, and they are part of providing the payment you asked for.
What we do not use
There is no analytics cookie, no advertising cookie, and no marketing pixel. Dismissing the short notice on the site stores a flag in the browser’s local storage, not in a cookie.