Cookie Policy

1. What are cookies

Cookies are small text files that are placed on your computer or mobile device when you visit our website. They help us provide you with a better experience by remembering your preferences and improving our services.

2. How we use cookies

We use essential cookies, which are required for the Website to function, and analytics cookies, which help us understand how the Website is used so we can improve it. The categories described below cover the types of cookies that may be used on the Website. Where a category is marked as not currently used, we do not set those cookies today; if that changes, we will update this policy and, where required, ask for your consent first.

Analytics cookies are only set if you consent to them. The first time you visit the Website you are shown a notice where you can accept or decline. Until you choose, no analytics cookie is set and nothing is stored on your device — but your visit is still counted anonymously, in the same way described below for visitors who decline. Essential cookies do not require consent, as the Website cannot work without them. Your choice is remembered for 12 months; after that the notice appears again so you can confirm or change it. You can also change it at any time using the control at the top of this page.

3. Types of cookies we use

Essential cookies

These cookies are necessary for the Website to function properly. They enable core functionality such as security, network management, accessibility, and keeping you signed in to your account during your session. These cookies are always active, as the Website cannot work without them.

Analytics cookies

Analytics cookies help a website understand how visitors interact with it, so it can be improved. We use PostHog for this purpose. PostHog sets a cookie in your browser and stores related information in your browser’s local storage. It records a randomly generated identifier for your browser, your current session, and how you arrived at the Website, so that a repeat visit can be recognised as the same visitor. Where you are signed in to your account, this identifier is linked to that account.

The same identifier ties your visit to a session replay — a reconstruction of your visit, rebuilt from the page itself rather than from any image of your screen. It shows the pages you viewed, your clicks and scrolling, and the text you type into forms. Documents and photographs you upload are never captured, and replays are deleted after 30 days. Section 5 of our Privacy Policy describes this in full.

If you decline — and equally in the period before you answer the notice at all — PostHog sets no cookie and stores nothing on your device. We continue to count visits in a way that does not identify you: PostHog’s servers calculate a hashed code from your IP address, your browser type and the day’s date. That code changes every day, is not stored on your device, and cannot be linked back to you or to your account. In this case no session replay is made, your IP address is not stored, and your activity is not linked to your account even while you are signed in.

Separately from PostHog, we use Vercel Web Analytics to count visits. It records the address of the page you opened, the country your request came from, your device type and browser, and the website that referred you. It sets no cookie, stores nothing on your device, does not use your IP address to build a profile of you, and cannot recognise you on a later visit or connect your activity to your account. Because it stores nothing on your device, it runs whether or not you accept analytics cookies. We use it as an independent count of how many people visit the Website, which is also how we can tell how many visitors never answer the notice above.

Preference cookies

Preference cookies remember your settings to provide a more personalised experience. We use one. It records whether you are reading the Website in Albanian or in English, so your choice survives as you move between pages and when you come back from signing in. It holds only the language code, is shared with no one, is not used to identify you, and is deleted when you close your browser.

Targeting cookies

Targeting cookies are used to deliver advertising and marketing. We do not display third-party advertisements, and no third party sets cookies on the Website for advertising. We do set two cookies of our own when a visitor arrives through a partner referral link, so that partner can be credited for the referral. One stores a short partner code for 30 days; the other lasts 30 minutes and only stops a page refresh from being counted as a second visit. Neither is shared with anyone, and neither is used to build a profile of you.

4. Third-party cookies

When you make a payment, our payment provider (POK) may set cookies on your device to process your transaction securely. Authentication on the Website is handled by Supabase, which sets essential cookies to keep you signed in. Analytics and session replays are provided by PostHog, which sets its own cookie as described in Section 3 and processes the data on servers within the European Union. Vercel, which hosts the Website, also provides the cookieless visit counting described in Section 3; it sets no cookie of its own. We do not use advertising or social-media cookies.

5. Managing cookies

For analytics cookies, use the control at the top of this page: it shows your current choice and lets you accept or withdraw at any time, with the change taking effect immediately. Your answer is also remembered for only 12 months, after which the notice appears again.

Beyond that, you can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and set most browsers to prevent them from being placed.

However, please note that disabling cookies may affect the functionality of our website and your user experience.

6. Browser settings

To manage cookies in your browser, go to Chrome: Settings › Privacy and Security › Cookies and other site data; Firefox: Settings › Privacy & Security › Cookies and Site Data; Safari: Preferences › Privacy › Cookies and website data; or Edge: Settings › Privacy, search, and services › Cookies.

7. Updates to this Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

8. Contact us

If you have any questions about our use of cookies, please contact us:

Email: contact@studentcard.al

Phone: +355 69 203 5051