Legal

Cookie Policy

Zora-Labs (zora-labs.com)

Effective from: 12 August 2026 · Version: 1.0

Polish version is binding. In case of any discrepancy, the Polish text of the Polityka plików cookies prevails.

This document sets out the rules for the use of cookies and similar technologies on the Zora-Labs Platform. It supplements the Privacy Policy and the Terms of Service. In case of discrepancy concerning personal data protection, the Privacy Policy prevails.

1. Controller

  1. The controller of the Platform and — to the extent that cookies constitute personal data — the controller of that data is:

    Zora-Labs spółka z ograniczoną odpowiedzialnością · ul. Gospodarcza 26, 20-213 Lublin · KRS: 0001254218 · NIP: 9462770116 · REGON: 545249855

  2. Contact: [email protected] · tel. +48 794 346 536 · https://zora-labs.com

2. What cookies and similar technologies are

  1. Cookies are small text files stored in your device's browser (computer, phone, tablet) when you visit a site. They allow your device to be recognised on subsequent requests, maintain the session and remember selected settings.

  2. We also use similar technologies, in particular:

    • browser local storage and session storage,
    • IndexedDB (including in connection with Firebase login),
    • session identifiers passed in request headers to our API after login.

  3. The storage and reading of information in the terminal equipment is governed in particular by Art. 399 of the Polish Electronic Communications Law. Consent is not required when the storage or reading is strictly necessary for the service you request. For the rest, consent is required.

  4. Some cookie information may constitute personal data (e.g. when it can be linked to an Account). In that case we apply the GDPR — purposes, bases and rights are described in the Privacy Policy.

3. What we use today — and what we do not

  1. We currently use only technologies essential for the operation of the Platform: login, security, session maintenance, remembering the language, cart / checkout state and remembering your choice in the cookie banner.

  2. We do not use and do not load:

    • third-party analytics cookies (in particular Google Analytics, Mixpanel, Amplitude, Hotjar, FullStory, Microsoft Clarity),
    • advertising or remarketing pixels (Meta, TikTok, Reddit, Google Ads and similar),
    • cookies to track you on other sites (cross-site tracking),
    • session recording or cursor movement (session replay).

  3. Platform usage measurement (minutes, jobs, clip downloads, in-app path after login) takes place server-side, in our own admin panel on GCP / Firebase. We do not install an external analytics script for this purpose and do not store a separate analytics identifier in your browser. Details — Privacy Policy, item 3.4.

  4. If in the future we add non-essential cookies (analytics or marketing), we will update this document before deployment, they will appear in the banner as a separate category and we will enable them only after your consent.

4. Categories of technologies used

They are needed for the Platform to work at all. Disabling them in the browser may prevent login, payment or session maintenance. In particular, they are used to:

  1. maintain login and the Account session,
  2. protect against CSRF attacks and abuse,
  3. remember the UI language,
  4. maintain the state of registration, cart and payment (checkout),
  5. remember whether the cookie banner has been displayed and which choice was made,
  6. balance traffic and provide basic security (e.g. distinguishing a browser from a bot to the extent necessary for the site to work).

These are primarily first-party mechanisms (set by zora-labs.com or its subdomains).

4.2. Third-party analytics

Not used.

4.3. Marketing / advertising / remarketing

Not used.

5. Mechanisms you may encounter

The list below describes typical essential first-party mechanisms. Exact names may differ depending on the browser, Platform version and login method. We do not install third-party trackers.

  1. Session / authentication token

    • Purpose: maintain login.
    • Technology: session cookie or local storage / IndexedDB (Firebase Authentication).
    • Period: session or until logout / token expiry (usually up to several dozen days with "remember me", otherwise until the browser is closed).
    • Basis: Art. 399 of the Polish Electronic Communications Law — strictly necessary for the service you request; GDPR Art. 6(1)(b).

  2. Form protection (CSRF / anti-forgery)

    • Purpose: protect requests against forgery.
    • Period: session.
    • Basis: strictly necessary; GDPR Art. 6(1)(f) (security).

  3. Language preference

    • Purpose: display the UI in the selected language.
    • Period: up to 12 months or until changed by you.
    • Basis: strictly necessary to provide the service in the chosen variant.

  4. Checkout / cart state

    • Purpose: not to lose the selected Plan when moving to payment.
    • Period: session or up to several hours.
    • Basis: strictly necessary to conclude the Agreement.

  5. Choice in the cookie banner

    • Purpose: not to ask again about the same choice and to demonstrate accountability.
    • Period: up to 12 months.
    • Basis: strictly necessary to remember the decision; GDPR Art. 6(1)(c) / (f).

  6. Technical session identifier

    • Purpose: link subsequent requests within one visit, error diagnostics, security limits.
    • Period: session or up to 24 hours.
    • Basis: strictly necessary; security.

Firebase Authentication may store tokens in IndexedDB / local storage rather than in a classical cookie file. The effect is the same: information remains in your device so that you do not have to log in on every page refresh.

6. LemonSqueezy (payments) — third party

  1. Payments are handled by LemonSqueezy (Sold through Link, LLC, USA) as Merchant of Record.
  2. When you go to payment (checkout, card management, invoices), LemonSqueezy may set its own cookies and similar technologies on its domains. This is used to process payments, transaction security, fraud prevention and tax obligations.
  3. In this respect, LemonSqueezy acts as a separate controller. Its privacy and cookie policy applies: https://www.lemonsqueezy.com/privacy
  4. We do not have access to your full card data. We do not combine LemonSqueezy cookies with our usage measurement for advertising purposes — we do not perform such advertising measurement at all.

  1. Storage on the device (Art. 399 of the Polish Electronic Communications Law):

    • essential mechanisms from items 4.1 and 5 — without consent, because they are strictly necessary for the operation of the Platform or for the service you request;
    • analytics and marketing — only with consent; currently not present.

  2. Personal data processing (GDPR):

    • performance of the Agreement (Art. 6(1)(b)) — session, login, checkout;
    • legitimate interest (Art. 6(1)(f)) — security, demonstrating the choice in the banner;
    • legal obligation (Art. 6(1)(c)) — when we must demonstrate accountability for consents;
    • consent (Art. 6(1)(a)) — only when we enable non-essential cookies.

  3. Details of purposes, retention and recipients — Privacy Policy.

8. Are cookies mandatory

  1. Essential mechanisms cannot be disabled in the banner without losing the operation of the site (login, payment, session).
  2. You can block them in the browser. The Platform may then malfunction or not work at all.
  3. There are no non-essential cookies today, so rejecting "everything except essential" does not change the operation of the Service.

9. How to manage cookies

9.1. Banner and on-site settings

On your first visit you may see a cookie notice. As long as we use only essential mechanisms, the banner is informational in nature (we do not need to ask for consent for analytics that does not exist).

When optional categories appear, there will be a "Cookie settings" link in the footer that lets you change your choice at any time. You can withdraw your consent as easily as you gave it. Withdrawal does not affect the lawfulness of processing before withdrawal.

9.2. Browser settings

You can delete or block cookies and site data in the browser:

  • Chrome — Settings → Privacy and security → Cookies
  • Firefox — Settings → Privacy and security → Cookies
  • Safari — Settings → Privacy → Cookies
  • Edge — Settings → Cookies and site permissions

Manufacturer instructions:

You can also enable incognito / private mode — most session cookies will disappear when the window is closed.

Deleting local storage / IndexedDB (including the Firebase token) will log you out of the Platform.

10. Transfer outside the EEA

Some essential mechanisms involve infrastructure outside the EEA (in particular Firebase Authentication in the USA). The transfer mechanisms (Data Privacy Framework, standard contractual clauses, adequacy decisions) are described in the Privacy Policy, item 7.

LemonSqueezy processes payment data primarily in the USA — under its own rules.

11. Your rights

To the extent that cookies and local storage constitute personal data, you have the rights under the GDPR: access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to the President of UODO (ul. Stawki 2, 00-193 Warsaw, https://uodo.gov.pl). Requests: [email protected]. Details — Privacy Policy, item 11.

  1. We may change this document when the law, technology, scope of the Services or list of mechanisms changes.
  2. For a material change (in particular the addition of analytics or marketing cookies), we will notify you via the site and — if you have an Account — also by e-mail or in the panel, with appropriate advance notice.
  3. The latest version is always at https://zora-labs.com

13. Contact

Questions about cookies: [email protected]

Zora-Labs Sp. z o.o. · ul. Gospodarcza 26, 20-213 Lublin · KRS 0001254218 · NIP 9462770116 · REGON 545249855 · [email protected] · +48 794 346 536 · https://zora-labs.com

Last updated: 12 August 2026

Zora LabsZora Labs

Clips, captions, transcription, and dubbing. Tools that help you get more from every recording.

European Union — European Funds for Eastern Poland

„Project Zora-Labs“ „Unicorn Hub Start-Up Platform – Edition II“ co-financed by the European Union under the European Funds for Eastern Poland 2021–2027 programme, Priority FEPW.01 Entrepreneurship and Innovation, Measure FEPW.01.01 Start-Up Platforms for New Ideas, Component I Incubation – development of a new business idea.

ElevenLabs Grants

Zora Labs is supported by the ElevenLabs Grants Program.

© 2026 Zora-Labs

This site uses only strictly necessary cookies (session, security, language, payment). We do not use third-party analytics or advertising pixels. Cookie Policy.