PART II — ENGLISH

1. CONTROLLER

The controller of cookies and similar technologies is:

ANTENA sp. z o.o. ul. Działdowska 16, 81-208 Gdynia, Poland NIP: 9581754603 | REGON: 541828792 | KRS: 0001174534 Email: support@simtrix.app Website: https://simtrix.app

2. WHAT ARE COOKIES?

Cookies are small text files stored on the user's device (computer, tablet, phone) by the web browser while using websites. Cookies allow the website to recognize the user's device and remember certain information about the session or preferences.

3. WHAT COOKIES DO WE USE?

3.1 Strictly Necessary Cookies

These cookies are essential for the proper functioning of the service and do not require consent. They cannot be disabled.

Name	Purpose	Retention	Provider
`session_id`	User session identification after login	Until session ends	SIMtrix
`csrf_token`	Protection against CSRF (Cross-Site Request Forgery) attacks	Until session ends	SIMtrix
`auth_token`	JWT authentication token — maintaining login state	7 days (or until logout)	SIMtrix
`cookie_consent`	Remembering cookie preferences	12 months	SIMtrix
`locale`	Remembering selected interface language (PL/EN)	12 months	SIMtrix

3.2 Functional Cookies

These cookies allow the service to remember user settings and preferences. They require consent.

Name	Purpose	Retention	Provider
`theme`	Remembering theme preference (light/dark)	12 months	SIMtrix
`dashboard_layout`	Remembering admin panel layout	12 months	SIMtrix

3.3 Analytics Cookies

These cookies allow the collection of anonymous data about how the service is used. They require consent.

Name	Purpose	Retention	Provider
`_ga`	Google Analytics — unique user identification	24 months	Google LLC
`_ga_*`	Google Analytics 4 — session state maintenance	24 months	Google LLC
`_gid`	Google Analytics — 24-hour user identification	24 hours	Google LLC

Note: Google Analytics may not be enabled at service launch. If enabled, this table will be updated and the cookie banner will require consent for analytics cookies.

3.4 Marketing Cookies

SIMtrix does not currently use marketing cookies. We do not use advertising tracking, remarketing, or user profiling for advertising purposes. If we decide to use such cookies in the future, this policy will be updated and users will be asked for consent.

4. THIRD-PARTY COOKIES

The SIMtrix service may use third-party services that may place their own cookies:

Provider	Purpose	Privacy Policy
Google Analytics	Traffic analytics (if enabled)	https://policies.google.com/privacy
Paddle.com	Payment processing (checkout)	https://www.paddle.com/legal/privacy
Google Firebase	Push notifications (FCM) — application context only	https://firebase.google.com/support/privacy

5. LEGAL BASIS

Strictly necessary cookies: Article 6(1)(f) GDPR (legitimate interest of the controller — ensuring proper functioning of the service) and Article 173(3) of the Polish Telecommunications Law
Functional and analytics cookies: Article 6(1)(a) GDPR (user consent) and Article 173(1) of the Polish Telecommunications Law
ePrivacy Directive: Article 5(3) of Directive 2002/58/EC

6. MANAGING COOKIES

Upon the first visit to simtrix.app, a banner is displayed informing about the use of cookies. The user may:

Accept all — enable strictly necessary, functional, and analytics cookies
Accept only necessary — enable only cookies essential for service operation
Customize preferences — individual selection of cookie categories

6.2 Changing Preferences

The user may change their cookie preferences at any time by:

Clicking the "Cookie Settings" link in the footer of simtrix.app
Deleting cookies through the web browser settings

6.3 Browser Settings

Every browser allows cookie management:

Google Chrome: Settings → Privacy and Security → Cookies
Mozilla Firefox: Settings → Privacy & Security → Cookies
Safari: Preferences → Privacy → Cookies
Microsoft Edge: Settings → Cookies and site permissions

Note: Disabling strictly necessary cookies may cause the service to malfunction (inability to log in, session loss, etc.).

7. LOCAL STORAGE AND SESSION STORAGE

In addition to cookies, the SIMtrix service may use Web Storage technologies (localStorage, sessionStorage) to store:

Authentication tokens (JWT)
User interface preferences
Temporary form data

This data is stored locally on the user's device and is not automatically transmitted to the server (unlike cookies). The user can delete it through the browser's developer tools.

8. RETENTION PERIODS

Session cookies: Automatically deleted when the browser is closed
Persistent cookies: Stored for the period indicated in the table in section 3 (from 24 hours to 24 months)
Web Storage: Stored until manually deleted or browser data is cleared

9. USER RIGHTS

Under GDPR, the user has the right to:

Withdraw consent for cookies at any time (without affecting the lawfulness of processing prior to withdrawal)
Access information about processed data
Delete cookies from their device
Lodge a complaint with a supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland)

Contact regarding cookies and privacy: support@simtrix.app

The Provider reserves the right to update this Cookie Policy in the event of:

Introduction of new service functionalities
Changes in tracking technologies used
Changes in applicable legislation

Users will be informed of significant changes through a banner on simtrix.app.