Cookie Policy
Effective date: August 5, 2026
This Cookie Policy explains how AI LAWTECH sp. z o.o. (“Referent”, “we”, “us”, “our”) uses cookies and similar technologies on referent.law, app.referent.law, and intake pages served by Referent (together, the “Service”). It forms part of, and should be read together with, our Privacy Policy.
- What cookies and similar technologies are
Cookies are small text files placed on your device when you visit a website. Similar technologies (such as local storage, pixels, tags and SDKs) work in comparable ways. They can be set by us (“first-party”) or by a third-party provider whose service we use (“third-party”). We use them to keep you securely logged in, to run and protect the Service, and, with your consent, to understand how the Service is used.
Cookies may be “session” cookies (deleted when you close your browser) or “persistent” cookies (which remain for a set period or until you delete them).
- Consent and legal basis
Under Polish law - the Act of 12 July 2024 on Electronic Communications (Prawo komunikacji elektronicznej), in force since 10 November 2024, Articles 399-400 - and the GDPR, we may store and read strictly necessary cookies without consent, but we obtain your consent before setting any non-essential cookie, such as analytics. Consent must be, and is sought so as to be, freely given, specific, informed and unambiguous, and you can withdraw it at any time as easily as you gave it.
For visitors in the United Kingdom, the equivalent rules are the Privacy and Electronic Communications Regulations (PECR) together with the UK GDPR; our approach is the same.
When you first visit, a consent banner lets you accept or reject non-essential cookies, or choose per category. Strictly necessary cookies are always active because the Service cannot function without them. We are implementing our systems so that no non-essential cookie or analytics SDK loads until you have consented, and we are working to close any gaps identified in that regard.
- Categories of cookies we use
Strictly necessary - required to run the Service and keep it secure (for example to log you in, remember your authentication state, and remember your cookie choices). These do not require consent.
Analytics - help us understand how the Service is used so we can improve it. These are set only with your consent.
We do not set advertising or third-party marketing cookies ourselves. However, third parties whose services we use (in particular Google - see Section 5) may set their own cookies, including for their own security, preference or advertising functions, which we do not control.
- Cookies we use
4.1 Strictly necessary (no consent required)
| Cookie | Provider | Purpose | Type / duration |
|---|---|---|---|
__Secure-better-auth.session_token | Referent (api.referent.law) | Keeps you securely logged in | First-party; session / short-lived |
__Secure-better-auth.trust_device | Referent (api.referent.law) | Remembers a trusted device for authentication (2FA) | First-party; persistent, up to 12 months |
| Consent-preference cookie | Referent | Stores your cookie choices so we do not ask again each visit | First-party; persistent, up to 12 months |
ph_opt_in_out_* | PostHog | Records your analytics opt-in / opt-out decision | First-party; persistent, up to 12 months |
4.2 Analytics (set only with your consent)
| Cookie / technology | Provider | Purpose | Type / duration |
|---|---|---|---|
ph_phc_* | PostHog | Product and website analytics: feature usage, performance and error insights | First-party; persistent, up to 12 months |
About our analytics. We use PostHog on PostHog’s EU Cloud, so that analytics data is intended to stay in the European Economic Area. PostHog’s session-replay feature is enabled with input masking (maskAllInputs) and text masking (maskTextSelector: ’*’), and content in AI traces is redacted before export. Analytics load only after you consent, and we are keeping under review whether session replay is needed at all for a professional legal product.
- Third-party and social-media content
Some parts of the Service load content or functionality provided by third parties, which may set their own cookies. These cookies are governed by the third party’s own cookie and privacy policies, not this one, and we do not control them.
5.1 Google
We use Google services, including Google Sign-In and the connections to Gmail, Google Calendar and Google Drive that you can enable, and our pages may load other Google components. When these load, Google may set cookies on the google.com domain (for example SID, HSID, SAPISID, APISID, SIDCC, __Secure-1PSID, __Secure-3PSID, NID, AEC). Google uses them for authentication, security and its own preferences and analytics/advertising functions, under the Google Privacy Policy (https://policies.google.com/) and Google’s cookie information (https://policies.google.com/technologies/cookies).
Cookies strictly necessary to complete an action you initiate (such as signing in with Google or connecting your mailbox) are used on that basis; other, non-essential Google cookies are set only after you consent.
5.2 Social media
Some pages may link to, or embed content from, social platforms (for example LinkedIn, Instagram, X/Twitter, Facebook, YouTube or Telegram). If you interact with embedded content or follow links to these platforms, they may set their own cookies under their own policies.
- Managing your choices
You can change or withdraw your consent at any time using the “Cookie settings” link in the website footer. Withdrawing consent is as easy as giving it and takes effect going forward.
You can also control cookies through your browser settings - blocking or deleting cookies, or asking to be warned before one is set. Note that strictly necessary cookies cannot be switched off without affecting how the Service works, and blocking some cookies may degrade your experience.
Where your browser sends a recognised automated signal (such as Global Privacy Control), we aim to treat it as a valid choice for non-essential cookies.
- How we record your consent
When you make a choice, we record what you consented to, the date, and the effective date of this Policy then in force, and we keep that record as evidence of consent. You can withdraw or change your choice at any time as described above.
- Changes to this Cookie Policy
We may update this Cookie Policy from time to time; the current version and effective date are shown at the top. Where changes are significant, we will seek fresh consent as required.
- Contact and complaints
Questions about cookies: privacy@referent.law - AI LAWTECH sp. z o.o., Henryka Sienkiewicza 36/5, 26-600 Radom, Poland.
You may lodge a complaint with a supervisory authority. Our lead authority is the Polish UODO (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa; uodo.gov.pl). Individuals in the UK may contact the ICO (ico.org.uk). Full details are in our Privacy Policy.