Note: This English version is provided for convenience only. In case of any discrepancy, the Czech version (Zasady pouzivani cookies) shall prevail.
1. Introduction
This Cookie Policy explains how Jurij Starynec, sole trader (OSVC), ID No.: 04080866, Tax ID: CZ9305054319, with registered office at Korunni 2569/108h, Vinohrady, 101 00 Prague 10, Czech Republic (hereinafter “we”, “us”, or “the Provider”), uses cookies and similar technologies on the website skillsetup.tech (hereinafter “the Website”).
This policy is issued in accordance with:
- Act No. 127/2005 Coll., on Electronic Communications, as amended (Czech Electronic Communications Act);
- Directive 2002/58/EC of the European Parliament and of the Council (ePrivacy Directive); and
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, “GDPR”).
For further information on how we process personal data, please refer to our Privacy Policy.
2. What Are Cookies and Similar Technologies
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to recognise your device and remember certain information about your session or preferences.
In addition to cookies, the marketing website also uses other browser technologies — localStorage (persistent browser storage that, unlike a cookie, is not automatically sent to the server with every request) and sessionStorage (session storage that the browser clears when the tab or window is closed). For clarity, this document also describes these technologies where they serve a purpose similar to a cookie (storing information on your device); the specific technical mechanism is always noted next to the relevant item below.
3. Legal Basis for Using Cookies
Under Czech Act No. 127/2005 Coll. and the ePrivacy Directive (Directive 2002/58/EC):
- Strictly necessary cookies (and equivalent storage) do not require your consent. They are essential for the operation of the Website and cannot be switched off.
- Non-essential cookies (e.g., analytics or advertising cookies) require your prior informed consent before they are placed on your device. We obtain such consent through a clear, visible consent mechanism (cookie banner) before any non-essential cookie is set.
Where cookies involve the processing of personal data, the GDPR (Regulation (EU) 2016/679) applies. The legal basis for strictly necessary cookies is Article 6(1)(b)/(f) GDPR (performance of contract / legitimate interest). For non-essential cookies, the legal basis is Article 6(1)(a) GDPR (consent).
4. How This Document Is Structured
SkillSetup operates two distinct online environments with very different cookie usage, so this document is split into two parts:
- Part A — Marketing website (
skillsetup.tech): the publicly accessible pages with product information, pricing, the contact form, and the sign-up/log-in forms. Google Analytics and Google Ads conversion measurement run on the marketing website, each only with your separate consent (analytics and advertising cookies respectively). - Part B — Application: the logged-in product environment (the HR / attendance / absence-tracking system) used by employees and administrators of SkillSetup customers. Here, only technical cookies strictly necessary for login and session management are used — no analytics or advertising cookies.
Part A — Cookies and Technologies on the Marketing Website (skillsetup.tech)
5. Strictly Necessary Technology: Your Cookie Choice and Chosen Language
To remember your choice regarding cookies, the marketing website uses browser storage (localStorage), not a cookie. The choice is stored under the key skillsetup-consent as a JSON value with a separate answer for each category, for example {"analytics":true,"ads":false}:
analytics— consent (true) or refusal (false) for analytics cookies (Google Analytics, see Section 6);ads— consent (true) or refusal (false) for advertising cookies (Google Ads conversion measurement, see Section 7).
Until you make a choice, the Website displays the cookie banner on every visit. The values granted and denied stored under the previous version of this policy are still read: denied as refusal of both categories, and granted as consent to analytics cookies only. In the latter case the Website shows the banner again, because you have not yet given consent to advertising cookies.
This storage is necessary for the consent mechanism itself to function — without it, the Website could not recognise that you have already made a choice, and the banner would reappear on every visit. No separate consent is required for this storage, under Section 89(3) of Act No. 127/2005 Coll. and Article 5(3) of Directive 2002/58/EC, in the same way as for the strictly necessary cookies described in Part B.
Chosen language. If you pick a different language version of the Website in the language menu, the Website stores that choice in localStorage under the key skillsetup-locale, so that your next visit to the home page takes you to the language you chose. This storage serves only to provide the service you explicitly asked for and likewise requires no consent.
Advertising data (only with consent). If you have given consent to advertising cookies, the Website also stores, in session storage (sessionStorage) under the key skillsetup-attribution, the ad click identifier and the campaign details from the link through which you arrived. Without that consent, this record is not created. See Section 7 for details.
6. Google Analytics (Analytics Cookies)
The marketing website uses Google Analytics 4 (Google’s “gtag.js” technology, measurement ID G-NMQF4RVH13) to gather basic visitor statistics — how many people visit the Website, where they come from, which pages they view, and whether they submitted the contact form or clicked the email address. This helps us understand how the Website performs and improve its content.
Google Analytics runs only after you give consent to analytics cookies — by clicking “Accept all” or by ticking the “Analytics” category in the banner’s settings (or if you gave that consent on a previous visit). The Website uses Google Consent Mode v2 in basic mode: the analytics_storage signal defaults to “denied”, and without consent Google Analytics is not configured, sets none of its cookies, and no visit data is sent to Google (see also Section 9).
Once consent is granted, Google Analytics sets the following cookies:
| Name | Purpose | Duration | Party |
|---|---|---|---|
_ga | Distinguishes individual visitors to the Website | 2 years | Google (first-party cookie set by Google’s script on the skillsetup.tech domain) |
_ga_<container ID> | Persists session state for this Google Analytics property | 2 years | Google (first-party cookie set by Google’s script on the skillsetup.tech domain) |
The durations are the defaults stated in Google’s documentation as of 8 October 2026 (support.google.com/analytics/answer/11397207 and business.safety.google/adscookies). Google determines the exact set of cookies and their durations and may change them. The period for which Google Analytics retains the measured data is set out in our Privacy Policy.
You can withdraw your consent to analytics cookies at any time via the “Cookie settings” link in the Website footer (see Section 9).
7. Google Ads Conversion Measurement (Advertising Cookies)
We promote SkillSetup with Google Ads advertisements. To find out which ads and campaigns lead to enquiries, the marketing website uses Google Ads conversion measurement: when a visitor submits the contact form or clicks the email address, the Website passes that event (a conversion) to Google Ads, which attributes it to the ad click.
Conversion measurement runs only after you give consent to advertising cookies — by clicking “Accept all” or by ticking the “Advertising” category in the banner’s settings. In Google Consent Mode, advertising consent sets the ad_storage signal (storing advertising cookies) and the ad_user_data signal (sending advertising-related user data to Google). The Website never grants the ad_personalization signal: data from the Website is not used for remarketing or for personalised advertising. Without consent, conversion measurement does not run and none of its cookies are set.
Once consent is granted, Google Ads sets the following cookies:
| Name | Purpose | Duration | Party |
|---|---|---|---|
_gcl_au | Conversion linker — lets a conversion on the Website be attributed to an ad | 90 days | Google (first-party cookie set by Google’s script on the skillsetup.tech domain) |
_gcl_aw, _gcl_gb | Store information about a Google Ads ad click, so that it can be measured whether a visit from an ad ended in a conversion | 90 days | Google (first-party cookie set by Google’s script on the skillsetup.tech domain) |
The durations are those stated in Google’s documentation as of 8 October 2026 (business.safety.google/adscookies); Google may change them.
Ad click identifier (session storage). When you arrive by clicking a Google ad, the page address contains a click identifier (gclid, gbraid or wbraid) and possibly campaign details (utm_source, utm_medium, utm_campaign, utm_term, utm_content). Only with your consent to advertising cookies does the Website store these details, together with the landing page address, in sessionStorage under the key skillsetup-attribution, and send them with the contact form even if you have moved to another page of the Website in the meantime. The browser clears this record when you close the tab or window. Without advertising consent (or after you withdraw it), the Website does not send click identifiers with the form.
Campaign details. The Website sends the campaign details (utm_*) and the landing page address with the contact form even without consent, where they appear in the address of the page from which you submit the form: they describe the advertising campaign, not a particular person, and without consent the Website does not store them on your device.
Reporting a conversion after an enquiry. If an enquiry turns into a product demo or a customer, we may upload the click identifier from the enquiry to Google Ads to report that conversion. We do so only for enquiries whose click identifier the Website captured with your consent to advertising cookies. See our Privacy Policy for details.
The marketing website does not use any other advertising, retargeting, or cross-site tracking technologies (e.g., Facebook Pixel, LinkedIn Insight Tag, or similar).
You can withdraw your consent to advertising cookies at any time via the “Cookie settings” link in the Website footer (see Section 9).
8. Overview — Cookies and Technologies on the Marketing Website
| Category | Name | Type | Purpose | Duration | Consent required |
|---|---|---|---|---|---|
| Strictly necessary | skillsetup-consent | localStorage (not a cookie) | Remembers your cookie choice (Section 5) | Persistent, until you clear it yourself | No |
| Strictly necessary | skillsetup-locale | localStorage (not a cookie) | Remembers the language version you chose (Section 5) | Persistent, until you clear it yourself | No |
| Analytics | _ga, _ga_<container ID> | Cookie (Google) | Google Analytics — website usage statistics (Section 6) | 2 years | Yes — analytics cookies |
| Advertising | _gcl_au, _gcl_aw, _gcl_gb | Cookie (Google) | Google Ads conversion measurement (Section 7) | 90 days | Yes — advertising cookies |
| Advertising | skillsetup-attribution | sessionStorage (not a cookie) | Ad click identifier and campaign details for the contact form (Section 7) | Until the browser tab or window is closed | Yes — advertising cookies |
9. Giving and Withdrawing Consent
On your first visit to the marketing website, a cookie banner appears with three equally prominent buttons: “Reject all”, “Settings” and “Accept all”. In the settings you can give consent separately for analytics and for advertising cookies and confirm your choice with “Save choices”; no category is pre-ticked. Until you consent to at least one category, the Website loads nothing from Google’s servers and sends nothing to Google (Google Consent Mode v2, basic mode).
You can change your choice at any time by clicking the “Cookie settings” link in the Website footer — this reopens the cookie banner together with the per-category settings so you can confirm or change your choice. The ability to withdraw consent at any time, as easily as it was given, reflects Article 7(3) GDPR.
If you withdraw consent for a category you had granted, the Website removes the Google Analytics and Google Ads cookies (_ga, _ga_<container ID>, _gid, _gat, _gcl_au, _gcl_aw, _gcl_gb, and any other cookies starting with _ga or _gcl_) from your browser and reloads the page to stop any ongoing measurement. Cookies of a category you still consent to are set again after the reload.
Part B — Cookies Within the Application (Logged-In Product)
10. Overview — Application Cookies
The logged-in SkillSetup product environment (the application) uses only the following strictly necessary cookies — unchanged from version 1.0:
| Name | Purpose | Duration | Type | Party |
|---|---|---|---|---|
access_token | Authentication and session management. Contains a JWT access token used to verify the identity of the authenticated user on each request. | 5 minutes | Strictly necessary, HttpOnly, Secure | First-party |
refresh_token | Session renewal. Contains a JWT refresh token that allows the session to be renewed without requiring the user to log in again. | 24 hours | Strictly necessary, HttpOnly, Secure | First-party |
Both cookies have the following security properties:
- HttpOnly — the cookie is not accessible via client-side JavaScript (protection against XSS attacks)
- Secure — the cookie is only transmitted over encrypted HTTPS connections
- First-party — the cookie is set directly by the skillsetup.tech domain, not by a third party
No analytics or advertising cookies are used within the application.
AI assistant (browser storage). If the Customer has enabled the AI assistant, the application stores two values in the browser’s localStorage (not cookies): that the user has dismissed the assistant’s AI notice (key ss:assistant:disclosure.<notice version>.<user ID>) and the chosen keyboard shortcut (key ss:assistant:hotkey). The assistant does not store conversation content in the browser.
11. Why These Cookies Do Not Require Consent
The access_token and refresh_token cookies do not require your consent. They are essential for the operation of the service you (as an employee or administrator of a SkillSetup customer) explicitly requested by logging into the application — this is session mechanics for an authenticated B2B tool, not tracking. This exemption from the consent requirement follows from Section 89(3) of Act No. 127/2005 Coll. and Article 5(3) of Directive 2002/58/EC.
12. Sentry and Session-Replay Recordings — See Privacy Policy
Within the application, SkillSetup uses Sentry for error monitoring and, in some cases, session-replay recording, for the purpose of diagnosing technical issues. Sentry does not use the cookies described in this document — it involves server-side/application-side session capture, not a cookie stored in your browser, and is therefore not described in detail here. A full description of this processing, including its legal basis and your right to object, is set out in our Privacy Policy. The AI assistant panel is excluded from session-replay recordings.
General Provisions
13. Managing Cookies in Your Browser
You can control or delete the cookies described in this document (both Part A and Part B) directly in your browser settings. Please note that disabling strictly necessary cookies (Part B) may impair your ability to log in and use other key features of the application.
Google Chrome
Settings > Privacy and security > Cookies and other site data
Mozilla Firefox
Settings > Privacy & Security > Cookies and Site Data
Microsoft Edge
Settings > Cookies and site permissions > Cookies and site data
Safari
Preferences > Privacy > Manage Website Data
Opera
Settings > Privacy & security > Cookies
For other browsers, please consult the browser’s documentation or help section. You may also use your browser to view which cookies are currently stored and delete individual cookies selectively.
14. Personal Data and Cookies
The access_token and refresh_token cookies (Part B) contain JWT tokens that may indirectly identify a specific user. Google Analytics and Google Ads conversion measurement (Part A) process visit data (e.g., IP address, the browser identifier stored in a cookie, the ad click identifier) that may also be considered personal data. The processing of personal data connected with the cookies described in this document is governed by our Privacy Policy, available on skillsetup.tech.
The recipient of the data from Google Analytics and Google Ads is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the provider of these services. The data may also be transferred to Google LLC, based in the USA. Google LLC is certified under the EU-US Data Privacy Framework, so the transfer relies on the European Commission’s adequacy decision (Article 45 GDPR) or, alternatively, on standard contractual clauses (Article 46 GDPR).
The legal basis is our legitimate interest and performance of contract under Article 6(1)(b) and (f) GDPR for strictly necessary cookies (Part B) and strictly necessary storage (Part A, Section 5), and consent under Article 6(1)(a) GDPR for Google Analytics and Google Ads conversion measurement (Part A, Sections 6 and 7). Storing and reading information on your device for these two purposes requires consent under Section 89(3) of Act No. 127/2005 Coll.
15. Changes to This Policy and Version History
We reserve the right to update this Cookie Policy at any time, in particular in connection with:
- the introduction of new cookies or technologies
- changes in applicable law
- changes to our technical implementation
Material changes will be communicated to you via the Website. The current version of this policy is always available on our Website.
| Version | Effective Date | Summary of Changes |
|---|---|---|
| 2.2 | 15 October 2026 | First publication on skillsetup.tech: the marketing website (consent in two categories, Google Analytics, Google Ads conversion measurement without remarketing, strictly necessary browser storage) and the application (strictly necessary cookies, AI assistant storage). |
16. Contact Information and Supervisory Authority
Contact
- Email: contact@skillsetup.tech
- Post: Jurij Starynec, Korunni 2569/108h, Vinohrady, 101 00 Prague 10, Czech Republic
Supervisory Authority
If you believe your rights have been violated in connection with the use of cookies or the processing of personal data, you have the right to file a complaint with:
Urad pro ochranu osobnich udaju (UOOU) (Office for Personal Data Protection)
- Address: Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
- Website: https://www.uoou.cz
- Email: podatelna@uoou.cz
- Phone: +420 234 665 111
This is an English translation of the authoritative Czech version of this document. In case of any discrepancy between this translation and the Czech original, the Czech version shall prevail. This policy is effective as of 15 October 2026.