Cookie Policy

Preamble

This Cookie Policy explains how solid.garden uses cookies and similar tracking technologies. By using our services, you consent to the use of cookies as described in this policy.

1. What Are Cookies?

1.1. Cookies are small text files that are stored on your device when you visit our website. They serve various functions, including: keeping you logged in to your account; remembering your preferences and settings; understanding how you use our services; improving website performance and security.

1.2. Types of Tracking Technologies: Web beacons (tiny images in emails to track opens); Local storage (browser storage for preferences and authentication); Session storage (temporary storage for active sessions).

2. Cookies We Use

2.1. Essential Cookies (Required): These cookies are necessary for the website to function properly and cannot be disabled. They include: Authentication (session tokens and login state); Security (CSRF tokens and security validations); Preferences (language, region, and basic settings); Session management (maintaining your active session). Duration is session (while browser is open) or persistent as required for functionality.

2.2. Functional Cookies: These cookies remember your choices to enhance your experience, including: UI preferences (theme, font size, layout choices); Form data (auto-fill for convenience); Recent items (recently accessed projects or files); Dashboard settings (customized dashboard layout). Duration is typically 30 days to 1 year.

2.3. Analytics Cookies (Optional): These cookies help us understand how visitors use our website, including: Page views (which pages are visited most frequently); User flows (how users navigate through the site); Performance (page load times and errors); Geographic data (general location at city/country level). Duration is typically 24 hours to 2 years. These cookies can be disabled.

2.4. Third-Party Cookies: Cookies set by trusted third-party services we use: Stripe (payment processing cookies during checkout); Railway (infrastructure and deployment cookies). We do not allow advertising networks to place cookies on our site. We do not sell your browsing data.

3. Specific Cookies Used

3.1. session_token: Authentication and session management. Duration is Session (until browser closed). Type is Essential.

3.2. csrf_token: Cross-site request forgery protection. Duration is Session. Type is Essential.

3.3. user_preferences: UI and language preferences. Duration is 1 year. Type is Functional.

3.4. _ga, _gid: Analytics (Google Analytics or similar). Duration is _ga: 2 years, _gid: 24 hours. Type is Analytics (Optional).

3.5. cookie_consent: Records your cookie consent choices. Duration is 1 year. Type is Essential.

4. Your Cookie Choices

4.1. Browser Settings: You can control cookies through your browser settings: Block all cookies (may affect website functionality); Delete existing cookies (clears all stored preferences); Block third-party cookies (limited impact on our site); Notify when cookies are set (receive browser notifications). Note that disabling essential cookies will prevent you from using our services properly.

4.2. Browser-Specific Instructions: Chrome – Settings → Privacy and security → Cookies; Firefox – Settings → Privacy & Security → Cookies; Safari – Preferences → Privacy → Manage Website Data; Edge – Settings → Cookies and site permissions.

5. Global Privacy Control (GPC)

5.1. We respect the Global Privacy Control (GPC) signal, which is a browser setting that communicates your opt-out preference.

5.2. If your browser sends a GPC opt-out signal, we will treat it as a request to disable analytics cookies. Essential cookies required for service functionality cannot be disabled by GPC.

5.3. GPC signals are honored for CCPA/CPRA compliance purposes. GPC is supported by recent versions of Brave, DuckDuckGo, Firefox, and other privacy-focused browsers.

6. Third-Party Services

6.1. Stripe (Payment Processing): We use Stripe to process payments. Stripe may set cookies during checkout. For more information, see https://stripe.com/cookies-policy/live. These cookies are only active during payment flow; Stripe is PCI DSS Level 1 compliant; we do not see or store card details.

6.2. Railway (Hosting Infrastructure): Our platform is hosted on Railway. For their cookie practices, see https://railway.com/legal/privacy. Railway provides infrastructure-level monitoring; performance and security logging; Railway has no access to your application data.

7. Updates to This Policy

7.1. We may update this Cookie Policy from time to time to reflect changes in our use of cookies or tracking technologies.

7.2. Material changes will be communicated by: posting the updated policy on our website; updating the "Last updated" date; displaying a prominent notice for significant changes.

7.3. Version History: January 8, 2026 – Cookie Policy converted to traditional legal format.

8. Contact Information

For questions about our use of cookies or tracking technologies, please contact:

DÉNES SZILÁRD e.v.
Magyarország 8171 BALATONVILÁGOS, PONTY UTCA 4
Hungarian tax number: 59835165-1-34
Email: szilard@solid.garden