Cookies and storage
IN EFFECT FROM 20 October 2026
This is a translation provided for your convenience. The binding version of this document is the Czech version; in the event of a conflict, that version prevails.
Here is an honest list of everything budevolno.cz stores in your browser. The short version: we do not track you around the internet and we pass nothing to advertising networks. We use only what the site could not work without, the choices you set yourself, and an in-house visit counter that is switched on only with your consent.
The service is operated by budevolno.cz s.r.o., Company ID No. 29810701, VAT No. CZ29810701, data box ID 2c3biv4, registered in the Commercial Register under file No. C 104704 kept by the Regional Court in Ostrava. For privacy questions write to podpora@budevolno.cz; the details of data processing are in the Privacy policy.
ESSENTIAL — NO CONSENT REQUIRED
Sign in. The session cookie (Supabase). Without it no customer, business or operator account works. It is set only when you sign in and lasts until you sign out, at most 400 days.
Storing your consent. The bv_souhlas cookie remembers what you chose in this banner, so that we do not keep asking. It lasts 1 year, after which we ask again.
The open session and the “Stay signed in” choice. A technical marker of the open browser (it disappears when you close it) and your choice of whether to be signed out when the browser closes.
A part-finished business registration. If you are registering a business and leave to sign in, we keep the part-finished form in your browser so that you do not have to fill it in again when you come back. It is created only once you start typing into the form, and is deleted once the business has been created. It is valid for 14 days: if you come back to the form later, we discard the part-finished form. Until you come back to it, it stays in your browser; you delete it by clearing the site data.
The invitation code. If you arrive from a referral link, we keep the code from it so that, once you register, the invitation is credited to whoever invited you.
Your customer card. We remember your card code (bv_karta_kod) so the QR renders at the counter instantly, even with no signal. It is created only when you open the card, it never leaves your device, and it is deleted when you sign out.
Your profile photo. A copy of the photo from your account (bv_klient_avatar) so it shows up straight away instead of being downloaded every time. Your account is the source of truth; the copy is deleted when you sign out.
A page for when you have no signal. If you turn on notifications or add the app to your home screen, one generic page (bv-koncak-offline, in the administration bv-podnik-offline) is saved in your browser and shown when you have no signal. It contains none of your data and is deleted when you uninstall the app or clear the site data.
Signing in and registration in progress. If you sign in with Google, we store a technical sign-in marker for 10 minutes that tells us, when you come back from Google, that the sign-in started in this browser. If you register with an email and password, we store a random code in your browser (bv_registrace) that tells us you are opening the confirmation link where the registration was created; it is valid for at most 14 days and we delete it once you confirm. When you confirm your email or reset your password, the sign-in service (Supabase) also stores a similar code; it deletes it as soon as it uses it in this browser or when you sign out, otherwise it stays for at most 400 days. When you agree to a new wording of the terms, the page remembers until you close the tab that it has already reloaded itself once (bv_souhlas_obnoveno). If you reach sign-in from a link (for example an e-mail with offered times) and sign in with Google, we store the address of the page to return you to (bv_oauth_zpet) until the tab closes, for at most 30 minutes; it is deleted after one use.
The link to publish a draft profile. If you arrive from a link to publish a draft profile of your business, we store its code (bv_navrh) in this tab and in your browser for two hours, so that the draft is linked to your business after you sign in or register.
The business selected in the administration. In the business administration we remember which business you have open (bv_zak_podnik), so that it does not switch to another one when you reload the page, if you manage more than one. The choice stays in your browser even after you sign out, until you clear the site data.
The till on a tablet. When a business pairs a tablet as its till, a device cookie (__Host-bv_pult) is stored on it so that we recognise the till without signing in. The cookie is set to last 10 years (your browser may shorten this), but the device stops being valid when the owner removes it in the administration or when it has not been used for 60 days. The till also remembers part-finished deductions, issues and stamps for 15 minutes (bv_pult_klic_…), so that nothing is recorded twice after the page is reloaded.
Technical markers in the business administration. After notifications on the device are renewed, the browser remembers the address of the original subscription until our server takes it over (bv_push_podnik_stary). On the attendance list for classes it remembers, until you close the tab, a note about a deducted entry whose result could not be verified (bv_nejiste_odecty), so that the entry is not deducted a second time by mistake.
The operator administration. For our dispatch team only: while our email inbox is being connected, the browser holds a technical marker for 10 minutes (bv_posta_oauth); when moving between screens it hands over the search term or recipient (bv:posta:predani, bv:zakaznici:hledat) and deletes it as soon as it has been taken over; until the tab is closed it remembers that it has reported notifications on the device to the server (bv_posta_odber:…); and it remembers the filter choice in the list of businesses (bv-podniky-jen-skutecne) until the site data in the browser is cleared.
FEATURES WITH THEIR OWN PERMISSION
Here the permission is not given by this banner but by your browser itself, and that is also where it is withdrawn.
Location. If you give your browser permission to determine your location, we keep the last point determined, the chosen search radius and a marker that location is switched on, on this device, so that we can order businesses by distance. We do not send the coordinates to our server. The permission is withdrawn in your browser settings, which stops the location being determined. You delete the last point determined by switching location off or by clearing the site data; if you choose a place by hand, it replaces the point. Without the permission you choose your default place by hand, by tapping on the map. If you put off the offer of location with the Not now button, we do not ask again for a week and we ask at most once per visit; we remember this in your browser too.
PREFERENCES — YOUR CHOICES
They are stored only at the moment you set something yourself, and serve only to save you setting it again.
Language. If you choose English in the footer, we remember it for a year so that you do not have to choose it on every visit. Without this consent the choice lasts only until you close the tab.
Appearance. Whether you want the photo background in the business administration or not.
Choices in the interface. Small things that remember your last choice by themselves: the toggles in customer Settings, the collapsed menu and the column width you set with the handle between the columns in both the business and the operator administration, and the period for which the business Dashboard shows you figures.
ANALYTICS
We measure traffic ourselves, and only with your consent. If you give it, we store a marker in your browser and a single piece of information goes to our server: that one visit arrived, where from (a search engine or an advert, for example) and to which of our pages. On the server this becomes nothing but aggregate daily and monthly counts.
The marker lasts 30 days and does two things: it says that this browser has already been counted today, so that one visit is not counted twice in a day, and it remembers where you first came to us from. That is how we can tell that a registration this week belongs to an advert you clicked last week. A later direct visit does not overwrite that original source. The marker contains no identifier that could be used to trace an individual person, only the date, where from and where to.
We do not store the exact time, your IP address, the address of a particular business or anything that could be used to trace an individual person. The numbers stay with us: we do not send them to Google or to any other service. If you do not give consent, or withdraw it, nothing is sent and we delete the marker from your browser; your visit is simply not counted in these numbers.
Independently of consent, on each business's profile we count only the aggregate daily number of times it was viewed, and we show that number to the business in its administration. For this we store nothing on your device and read nothing from it, and we do not store your IP address, browser details, the exact time or where the visit came from.
MARKETING
We use none, and we pass nothing about you to advertising systems. If we ever start measuring the effectiveness of paid advertising, we will ask you about it again and separately.
THIRD-PARTY SERVICES
Map data (Stadia Maps, from its servers in the European Union) and business photos (Unsplash) are loaded from their servers, and on loading they see your IP address, as is usual on the web, and Stadia Maps also the map section you are looking at. The forms used to book, sign up for a class, send an enquiry, watch for free time, report a business profile, request a verification code, register, set up a business, sign in, reset a password or have a confirmation email sent again additionally run Cloudflare Turnstile bot protection; to verify that you are a human it stores a short-lived technical value in your browser and sees your IP address. Without it, text messages and emails could be sent to other people's numbers and addresses in our name. None of these services sets tracking or advertising cookies here.
The exception is a YouTube video on a business's profile. We send you the video preview from our own server, so until you start the video, YouTube and Google learn nothing about your visit. The YouTube (Google) player loads only at the moment you click the play button; only then does Google see your IP address and details about your browser and device, and under its own rules it may store cookies or similar data in your browser. We use privacy-enhanced mode for this (youtube-nocookie.com).
YOUR CHOICES
You can change your consent at any time: the new choice takes effect immediately and is stored for another year.