1. Introduction
This Policy explains what information we store on your device (browser/app) when you use HUBAL at hubal-project.com and in the mobile app, and for what purpose. This Policy supplements the Privacy Policy.
The controller is ANTONI SUROWIAK EMA STUDIO, ul. Westerplatte 6, 38-200 Jasło; contact: privacy@hubal-project.com.
2. Key points in brief
- We do not use cookies for tracking or advertising.
- Sign-in and the operation of the application rely on the first-party local storage (
localStorage/sessionStorage) of your browser — which is necessary to provide the service. - We currently do not run any web analytics (Google Analytics is disabled) or marketing tracking technologies.
- Because we use only strictly necessary technologies, their use does not require your consent. If we were to enable analytics or marketing in the future — we will first ask for your consent (with an equally easy option to refuse).
3. Definitions
- Cookies — small text files saved by a website on your device. HUBAL does not set its own cookies for tracking purposes.
- Local storage (
localStorage/sessionStorage) — a browser mechanism that allows data to be saved on your device (e.g. settings, session). Legally, this constitutes "storing information on terminal equipment" within the meaning of Article 399 of the Electronic Communications Law (Poland) — just like cookies — but where it is necessary for the service you request, it does not require consent. - Necessary vs optional — necessary items (session, security, preferences) always operate; optional items (analytics, marketing) — only with consent. We currently use necessary items only.
4. What we actually use (necessary storage)
| What | Type | Purpose | Necessary? |
|---|---|---|---|
| Session / authentication token (Firebase) | localStorage | keeping you signed in without having to log in again on every page | yes |
| Record of your consent / privacy preferences | localStorage | remembering your settings | yes |
| Interface preferences (theme, language, selected organization/project, panel layout) | localStorage/sessionStorage | personalization and correct operation of views | yes |
| Working data at hand (project cache, AI chat history) | localStorage | performance and continuity of work | yes (functional) |
| Integration tokens (e.g. Calendar/email) | localStorage (encrypted/securely referenced) | operation of connected services | yes (when you enable an integration) |
HUBAL sign-in relies on local storage, not on cookies.
5. Elements provided by third parties
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — font loading. It does not set cookies, but downloading the fonts involves a connection to Google's servers (transmitting, among other things, your IP address). - Google/Microsoft sign-in and services, AI assistant — described in the Privacy Policy; in the course of standard operation we do not use marketing cookies.
- YouTube — embedded videos (
youtube-nocookie.com) — on the home page, videos are embedded in the "Video" window. Thumbnails and the player load only after you open that window and click the selected video; before that, the browser does not connect to Google's servers for this purpose at all. Once playback starts, Google receives, among other things, your IP address and may store on your device information needed for playback (e.g. player settings). The "no-cookie" mode limits the storing of identifiers used for advertising purposes. Because you start the video with your own click, this is storage necessary for a service you yourself requested — it does not require separate consent. Closing the window stops playback and the connection.
We do not use: Google Analytics (disabled), Facebook Pixel, Google Ads/DoubleClick, reCAPTCHA, Hotjar, or other tracking technologies. The only external element launched at your request is the YouTube player described above.
6. Analytics and marketing in the future
If we decide to enable statistics (e.g. Google Analytics) or marketing technologies, we will first display a consent banner allowing informed and voluntary acceptance as well as an equally easy refusal of individual categories, without blocking access to the service. We will also update this Policy with a list of the specific files/technologies.
7. Legal basis
- Articles 399 and 400 of the Electronic Communications Law (Poland) — storing/reading information on a device; for necessary technologies consent is not required, for all others it is required (we apply the GDPR provisions on consent accordingly).
- GDPR — to the extent that the above information constitutes personal data (see the Privacy Policy).
8. How to manage
- You can at any time clear local storage and cookies in your browser settings and block them from being saved. Because we use necessary technologies, blocking them may prevent you from signing in or may stop some features from working correctly.
- Instructions for popular browsers: Chrome, Firefox, Safari, Edge — in the vendors' help sections.
- In the mobile app, you can remove local data by clearing the app's data in your system settings or by uninstalling the app.
9. Changes and contact
We may update this Policy (e.g. after enabling new technologies). Each version has a number and a date. For privacy-related matters: privacy@hubal-project.com.