Legal
Cookie policy
What this site stores in your browser and what it is used for.
This site gets by with essential cookies only. It doesn't track you across websites and doesn't sell data to advertisers; the only optional thing is traffic analytics, and without your consent it runs anonymously, without a single cookie.
What a cookie is
A small file the website stores in your browser and receives back with each subsequent request. That's how the server remembers you're signed in and doesn't log you out on every click.
What we store
| Name | When it's created | Lifetime | What it's for |
|---|---|---|---|
| PHPSESSID | when you sign in, submit a form, or a notification is shown | 14 days | keeps your session; without it the site would forget you're signed in |
| _nss | with forms | for the session | protection against form submissions from other sites (CSRF) |
| _ga, _ga_* | only if you allow analytics on the banner | up to 2 years | distinguish repeat visits for Google Analytics |
The first two are technically essential: without them you can't sign in or submit a form, so they don't require consent and are stored right away. They are marked HttpOnly (JavaScript can't read them), Secure (sent over HTTPS only) and SameSite=Lax (they don't travel with requests from other websites).
Your choice from the analytics banner (allow / decline) is not stored in a cookie but in browser storage (localStorage). It stays in your browser only and is never sent anywhere.
If you just read the public pages, don't sign in anywhere, and don't allow analytics, nothing gets stored at all.
Traffic analytics
We measure traffic with Google Analytics in two modes:
- Without consent: no cookie, only anonymous data about viewed pages. Repeat visits can't be recognized; Google models conversions instead.
- With consent from the banner: the
_gaand_ga_*cookies are stored, which distinguish repeat visits.
Advertising features are off in both modes. You can change your choice anytime with the button below. The club member area and account settings are not measured at all.
Third-party services
A third party enters the picture in three places. None of it tracks you across websites:
- Comgate and Stripe payment gateways: during payment you're redirected to their page, where their own policies apply. Card details never reach us.
- Cloudflare Turnstile: verification that a form isn't being submitted by a robot. It replaces reCAPTCHA precisely because it doesn't track users.
- Google Analytics: the analytics described above: anonymous
and cookie-free without consent, with the
_gacookies with consent.
Your analytics choice
Consent to analytics cookies can be given or withdrawn at any time. The button shows the banner again, and until then only anonymous measurement runs:
How to get rid of cookies
By signing out, or by deleting cookies in your browser settings. You can also block them entirely, but then signing in won't work and submitted forms will end with an error, because the server has nowhere to remember who you are.
Guides: Chrome, Firefox, Safari, Edge.
Changes
If the scope of analytics or cookies ever expands, this text will change before the first new cookie is stored.
Contact
Filip Novák, DiS., Company ID 73943118, registered office at Palackého třída 2630/131, Brno – Královo Pole, 612 00, Czech Republic. Questions at info@zsf.cz or via the contact form.