Cookie Policy
Zásady používání cookies — Last updated: October 13, 2026
1. Cookies and Other Browser Storage
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and understand how you use the site. This policy complies with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 127/2005 Coll. on Electronic Communications (Zákon o elektronických komunikacích), as amended by Act No. 374/2021 Coll.
Permit.cz also keeps some things in your browser without cookies, in local storage (stays until it is cleared) and session storage (gone when you close the tab). Some things are only ever held in the page's memory and are gone when you reload or leave. All four are described below. Nothing in local or session storage is sent to us unless a section says so.
2. Cookies
2.1 Strictly Necessary Cookies
These cookies are essential for the website to function. They cannot be disabled. No consent is required for these cookies under Article 5(3) of the ePrivacy Directive.
| Cookie name | What it is for | How long it lasts | Set by |
|---|---|---|---|
permit_cz_cookie_consent | Remembers your cookie choices, so we do not ask again on every page | 1 year from your last choice | Permit.cz |
sb-…-auth-token (sometimes split into .0, .1) | Keeps a subscriber signed in. Set only when you sign in | Up to 400 days (the default of the sign-in library we use, Supabase's @supabase/ssr). Deleted when you sign out | Permit.cz, using Supabase |
sb-…-auth-token-code-verifier | Links a sign-in or password-reset email back to the browser that asked for it | Removed once the link is used | Permit.cz, using Supabase |
2.2 The Free Exam Paper
Set only if you start the free citizenship exam paper on /exam.
| Cookie name | What it is for | How long it lasts | Set by |
|---|---|---|---|
permit_free_attempt | Records that this browser has started its one free paper, so your result can be shown again and a second free paper is not started. It is signed, and page scripts cannot read it | 1 year | Permit.cz |
2.3 Analytics (Only With Your Consent)
Nothing in this section runs until you choose "Accept All", or tick "Analytics" and save, in the cookie banner. If you reject or later withdraw analytics, the Google Analytics cookies below are deleted and both services stop.
| Cookie name | What it is for | How long it lasts | Set by |
|---|---|---|---|
_ga | Tells one visitor from another in Google Analytics | 2 years (Google's default; we do not change it) | |
_ga_… | Keeps track of the current visit in Google Analytics | 2 years (Google's default; we do not change it) |
Vercel Web Analytics (our host's page counter) also runs only with analytics consent. It sets no cookies: according to Vercel, it recognises a visit from a hash made from the request, which is discarded after 24 hours, and we send it page addresses without the part after ?. The site never puts anything you type into a page address, so neither service receives it that way.
2.4 Marketing Cookies (Require Consent)
Currently, Permit.cz does not use any marketing or advertising cookies. If this changes in the future, we will update this policy and request your consent before setting any marketing cookies.
3. Local Storage, Session Storage and Memory
3.1 Local Storage (Stays Until Cleared)
| Name | What is kept, and why | When it goes |
|---|---|---|
permitcz-form-… (one per form) | What you type into a form's companion on a form page, so you can come back to it | "Clear all" on that form, or clearing this site's data in your browser |
permitcz-personal-shared | Personal details you typed into any form companion (names, date and place of birth, nationality, birth number, passport details, phone, email, address), so the next form can fill them in for you. Never sent to us | "Clear all" on any form, or clearing this site's data |
permit_path_planner_result | Your answers in Find your next step and the routes they matched, so the result can be shown again when you come back from a form, and used to start your workspace if you subscribe | When your workspace setup uses it, or clearing this site's data. There is no other expiry |
permit-cz-chat-history | Your last 50 messages with the assistant, so the conversation survives a reload | "Clear chat" in the assistant, or clearing this site's data |
permit-cz-dismissed-notifs, welcome-tour-dismissed, onboarding-banner-dismissed | That you closed a notification, the welcome tour or the setup banner in your workspace | Clearing this site's data |
3.2 Session Storage (Gone When You Close the Tab)
| Name | What is kept, and why | When it goes |
|---|---|---|
permitcz-forms-search-handoff | A search you typed on the homepage, handed to the forms list without putting it in the address | Deleted as soon as the forms list reads it |
permitcz-usage-warning-shown | Which usage notices you have already seen in your workspace | When you close the tab |
3.3 Memory Only (Gone on Reload)
Your answers in Find your next step while you are still answering, the date check on the "My permit expires soon" page, and what you type into the letter tools are held only in the page and are not stored. The complaint letter sends what you typed to our server only when you ask for the PDF, to build it.
4. Managing and Removing
- Cookie banner: When you first visit Permit.cz, you can accept all, reject optional, or customize which categories to allow.
- Cookie settings: "Cookie settings" at the bottom of every page reopens the banner with your current choices, so you can withdraw or give analytics consent at any time.
- Form companions: "Clear all" on a form page removes what you typed into that form and the personal details shared between forms.
- Signing out removes the sign-in cookies.
- Everything at once: clearing this site's data (cookies and site data for permit.cz) in your browser settings removes all of the above.
- Browser settings: Most browsers allow you to block or delete cookies through their settings. Note that blocking essential cookies may prevent the website from functioning properly.
5. Third-Party Services
Some cookies are set by third-party services that appear on our pages. We do not control these cookies. The relevant third-party privacy policies are:
- Google Analytics: Google Privacy Policy and GA Opt-out Browser Add-on
- Vercel Web Analytics: Vercel Web Analytics privacy and compliance
- Supabase: Supabase Privacy Policy
6. Data Transfers
Analytics cookies may transfer data to Google servers in the United States. This transfer is covered by Standard Contractual Clauses (SCCs) approved by the European Commission. According to Google, Google Analytics 4 does not log or store IP addresses, so there is no IP anonymisation setting for us to turn on.
7. Changes to This Policy
We may update this Cookie Policy when we add or remove cookies, or when legislation changes. The "Last updated" date at the top reflects the latest revision.
8. Contact
For questions about cookies:
Egemen Toprak
Email: privacy@permit.cz
IČO: 22240322