Legal

Cookie Policy

Effective May 1, 2026

This page explains the cookies and similar technologies Aflink uses on aflink.io and app.aflink.io, why we use them, and how you can manage your preferences. Aflink is owned and operated by Fungies Europe P.S.A. (KRS 0001137340), Warsaw, Poland. We follow the EU ePrivacy Directive and GDPR — strictly necessary cookies are set automatically, everything else requires your prior consent.

Strictly necessary cookies are always on. Choose what else you allow — you can change this anytime.

Strictly necessaryAlways on

Authentication, session integrity, security. Required for the site to work.

Functional

Remembers UI preferences (theme, dismissed banners, language).

Analytics

Aggregate, privacy-preserving page-view metrics. No advertising profile.

Marketing

Currently disabled by default. Aflink does not run ad trackers.

Choices stored locally on this device.

01Service provider

The Aflink service (aflink.io and app.aflink.io) is owned and operated by Fungies Europe Prosta Spółka Akcyjna (P.S.A.) — a simple joint-stock company incorporated under Polish law and registered with the National Court Register (KRS).

  • Legal name: Fungies Europe Prosta Spółka Akcyjna (P.S.A.)
  • Registered seat: Al. Jerozolimskie 109 / 70, 02-011 Warsaw, Poland
  • KRS (Polish National Court Register): 0001137340
  • NIP (VAT ID): PL5214093272
  • REGON: 540135615
  • Share capital: 10,000 PLN
  • Public registry record: https://rejestr.io/krs/1137340/fungies-europe
  • Contact email: contact@fungies.io

Throughout this document, "Aflink", "we", "us", and "our" refer to Fungies Europe P.S.A. unless explicitly stated otherwise.

02What are cookies?

Cookies are small text files stored on your device when you visit a website. They are commonly used to make sites work, remember preferences, and — with your consent — measure how the site is used. We use a minimal set; we do not run advertising or cross-site tracking cookies.

03Cookie categories we use

CategoryPurposeLegal basis
Strictly necessaryAuthentication, session integrity, CSRF protection, load-balancing.Legitimate interest — cannot be turned off without breaking the site.
FunctionalRemember UI preferences (theme, dismissed banners, cookie choices).Consent / legitimate interest depending on jurisdiction.
AnalyticsPrivacy-preserving, aggregate page-view metrics. No personal profiles.Consent (Art. 6(1)(a) GDPR & ePrivacy).
MarketingCurrently disabled. Aflink does not run advertising trackers.Consent if/when enabled.

04Cookies we set

NameProviderPurposeDuration
sb-access-token / sb-refresh-tokenSupabase (first-party)Authentication and session continuity for app.aflink.io.Session / 30 days
__cf_bm, cf_clearanceCloudflareBot mitigation and DDoS protection on aflink.io.30 minutes / 1 year
aflink_consentAflink (first-party)Stores your cookie preferences across visits.12 months
aflink_attributionAflink (first-party)Affiliate click attribution — only set when an affiliate URL is visited.30–90 days (per program)
We do not load Google Analytics, Facebook Pixel, TikTok Pixel, or any retargeting cookies on aflink.io.

05Third-party services that may set cookies

  • Stripe and Fungies set fraud-prevention cookies during checkout flows in app.aflink.io — strictly necessary for payments.
  • Cloudflare sets bot-mitigation cookies as part of our security stack — strictly necessary.
  • Vercel may set a session affinity cookie for stable rendering — strictly necessary.

06Managing your preferences

Use the Cookie Preferences widget at the top of this page to opt in or out of analytics or marketing cookies at any time. Your choice is stored in the aflink_consent cookie and applies for 12 months. You can also clear cookies in your browser settings to reset your choices.

  • Chrome: Settings → Privacy and security → Cookies and other site data.
  • Firefox: Settings → Privacy & Security → Cookies and Site Data.
  • Safari: Preferences → Privacy → Manage Website Data.
  • Edge: Settings → Cookies and site permissions → Manage and delete cookies.

07Do Not Track & Global Privacy Control

We honour browser-level Do Not Track signals and the Global Privacy Control (GPC) signal where present — visitors with these enabled are treated as if they have opted out of analytics and marketing categories.

08Changes to this policy

We update this Cookie Policy whenever we add, remove, or change a cookie. Material changes are announced on this page and via the cookie banner.

09Questions

  • Email: support@fungies.io
  • Postal: see Privacy Policy → Contact section.