Cookies

• The recipient language cookie (`souborovna-recipient-locale`) remembers Czech or English until the browser session ends. A signed-in user’s language is also saved in account settings.
• Sign-in — the account session and protection of forms against forgery (CSRF). Signing in securely is not possible without them. Web sessions last up to 30 days; the form-verification and return-address cookies support the sign-in flow.
• Transfer password — after the correct password is entered, the browser remembers for 1 hour that you unlocked the transfer.

• Opened-transfer history (`souborovna.received.v1`, localStorage) stores the link identifier and opening time, up to 50 entries, with no time limit. When displayed, links are sent to the server to check availability; without an account they are not stored in server history. Clear it by deleting site data or deleting your account from this browser.
• The upload queue (`souborovna:uploads:v1:…`, localStorage) stores names, sizes, types, transfer status, settings and resulting links. It is usable for up to 24 hours since its last save; the old record is removed when the queue is next loaded. It contains neither file contents nor passwords.
• The folder-view preference (`souborovna-folder-view`, localStorage) remembers grid or list with no time limit until site data is cleared. It is not sent to the server.
• Error recovery (`souborovna-error-reload-at`, sessionStorage) stores the last reload attempt in this tab, prevents another attempt for 60 seconds and ends with the tab session. It is not sent to the server.
• A transfer-unlock flag (sessionStorage) shows confirmation after a password is entered. It is removed after use or on error, and ends with the tab session. It is not sent to the server.
• After account deletion, the `souborovna-deleted-scope` cookie identifies the local upload queue to clear for up to 60 seconds and is removed after cleanup.

Self-hosted Umami measures website usage without cookies or a persistent device identifier. Private links are replaced with an anonymous template without a transfer identifier. The web and server-side app requests provide aggregate action counts without user identity, grouped by recognised web, iOS or Android platform; an unrecognised platform remains unknown. Individual pageview and event records are kept for 90 days and daily aggregates for 13 months. We do not disclose these statistics to third parties.

In the iPhone and iPad app from version 2.3.2 and the Android app from version 2.4.1, we measure visits and views of predefined screen categories. The app keeps a random visit reference and unsent events only in memory, from launch or return to the foreground; they are not saved to disk. No user, device, installation or advertising identifier is used, and screen contents or private links are not sent. Visits, screen views and aggregate server-side app actions are measured by default. You may request that measurement be disabled by emailing info@souborovna.cz. You may object under Article 21 GDPR by contacting info@souborovna.cz. The Privacy Policy describes the data and aggregate statistics in detail.

The purpose is aggregate usage statistics to improve the service, based on our legitimate interest. Website and app measurement runs through Umami on our own server.

Website measurement is enabled by default, without a dialog. It respects Do Not Track (DNT: 1) and the browser opt-out available in the Privacy Policy. Opting out stores only the local umami.disabled preference until you clear this site's data. It is neither an identifier nor a cookie; if storage is unavailable, measurement is disabled at least for the current page. This choice applies to this browser, not to other browsers or apps.

Ads shown with transfers use no advertising cookies and no tracking. Playing or downloading an unprotected transfer needs no cookies. Password-protected transfers need a password-verification cookie. You can delete cookies in your browser settings at any time; deleting the necessary cookies signs you out.

See the Privacy Policy for data processing details.