Cookie Policy

Cookies are small text files saved on a user's device when browsing websites. They enable core site functionality, store user preferences, and help analyse how the site is used. Cookies do not contain viruses or malware and do not allow user identification outside the context of the service.

Necessary cookies (session)

Necessary cookies are required for the proper operation of the website and Client Panel. They do not require user consent — without them the service cannot function correctly.

• he_at — access token (JWT); identifies the user's logged-in session in the Client Panel. Validity: 1 hour. Type: HttpOnly, Secure, SameSite=Strict.
• he_rt — refresh token; enables automatic session renewal without re-login. Validity: 7 days. Type: HttpOnly, Secure, SameSite=Strict.

Functional cookies

Functional cookies remember user preferences to provide a personalised experience. They are not required to use the site, but disabling them may limit some features.

• i18next — user language preference (stored in localStorage). Remembers the selected interface language (pl, en, tr, ru, uk, ar, ro). No expiry — remains until browser storage is cleared.

Third-party cookies — Stripe (payment processor)

During the payment process, Stripe Inc. (USA) may set its own cookies to ensure transaction security and prevent fraud. These are essential for processing card payments. Such data is handled in accordance with the Stripe Privacy Policy.

Analytics and marketing cookies (require consent)

These are set only after you accept them in the cookie banner. They are not required to use the site, and you can decline or withdraw consent at any time.

• Google (Google Ireland Ltd.) — Google Tag Manager and the Google measurement/advertising tags it loads (e.g. Google Analytics, Google Ads), used to analyse site usage and ad performance. Typical cookies: _ga, _gid, _gcl_au. Validity: up to 24 months. Processed under the Google Privacy Policy.
• Meta Pixel (Meta Platforms Ireland Ltd.) — measures conversions and lets us reach visitors with relevant ads on Facebook and Instagram. Typical cookie: _fbp. Validity: up to 3 months. Processed under the Meta Privacy Policy.

Necessary and functional cookies (described above) are used without consent — they are required to deliver the service or fall within the Controller's legitimate interest. Analytics and marketing cookies (Google, Meta Pixel) are loaded only after you give prior consent through the banner shown on your first visit.

You may accept or decline these technologies, and you can change or withdraw your choice at any time using the "Cookie settings" link in the website footer, or through your browser settings (see the section below). Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

You can manage cookies via your web browser settings. Instructions for the most common browsers:

• Google Chrome — Settings → Privacy and security → Cookies and other site data.
• Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data.
• Apple Safari — Preferences → Privacy → Manage Website Data.
• Microsoft Edge — Settings → Cookies and site permissions.

Blocking the necessary cookies (he_at, he_rt) will prevent use of the Client Panel. Blocking functional cookies will not affect access to site features, but the language preference will not be remembered.

The use of cookies takes place on the following legal bases:

• Necessary cookies (he_at, he_rt) — Art. 6(1)(b) GDPR (performance of a service contract); these cookies are necessary to provide the Client Panel services used by the customer.
• Functional cookies (i18next) — Art. 6(1)(f) GDPR (legitimate interest of the Controller); remembering the language preference is in the Controller's legitimate interest and serves to improve the user experience.
• Analytics and marketing cookies (Google, Meta Pixel) — Art. 6(1)(a) GDPR (consent); these technologies are used only after prior consent, which can be withdrawn at any time.

The Controller reserves the right to amend this policy in the event of new technologies being deployed, changes in the services provided, or updates to applicable law. The current version of the policy is always available at henryestates.pl/cookie-policy; the date of the last update is shown at the top of the document.

For questions regarding the use of cookies, please contact: info@henryestates.pl.

Detailed information about the processing of personal data can be found in our Privacy Policy.