Cookie Policy
An overview of the cookies and data Papu stores in your browser. Effective 2026-07-23, version 1.0. The Czech version prevails in case of conflict.
Last updated: 2026-07-23
1. How it works
Necessary cookies are always set - without them sign-in and storing your choice would not work. Anything else (traffic statistics) loads only after you consent. Until then no third-party script runs.
Consent is optional, rejecting is as easy as accepting, and you can change your choice at any time with the Cookie settings button on this page or in your account settings.
2. Necessary cookies
| Name | Purpose | Lifetime |
|---|---|---|
| token | sign-in token (JWT), keeps you logged in | 24 hours |
| session | session identifier for a signed-in user | 24 hours |
| papu_consent | your cookie choice (categories, time, version) | 12 months |
Sign-in cookies are HttpOnly, Secure and SameSite, so they cannot be read by scripts or abused from another site.
3. Browser storage (local storage)
The following stays on your device and exists so the service works without an account. It is not a cookie and is never sent to third parties.
| Key | Purpose |
|---|---|
| anonId | random device identifier so you see your own orders while signed out |
| orders | bill splits you created while signed out |
| iban | last used bank account, to prefill the payment QR code |
| papu_joined_groups | group orders you have joined |
| group_session_* | your access to an individual group order |
| sidebar.left, sidebar.right | whether a side panel is open |
Clear it by clearing site data in your browser settings.
4. Traffic statistics (consent only)
With your consent we load Cloudflare Web Analytics. It sets no cookies and does not identify individual visitors - it measures aggregate page views and load performance only. Without consent the script is never downloaded.
| Tool | Provider | Cookies | Purpose |
|---|---|---|---|
| Cloudflare Web Analytics | Cloudflare, Inc. | none | aggregate traffic and page performance |
5. Changing your choice
Use the Cookie settings button at the top of this page, or the one in your account settings if you are signed in. Consent to statistics can be withdrawn at any time and takes effect as soon as it is saved.
You can also block or delete cookies in your browser. Blocking necessary cookies makes signing in impossible.
6. Contact
Questions: daniel.vazac@email.cz. See also the Privacy Policy and Terms of Service.