Version: 2026-10-13.1. Effective: 13 October 2026. Controller: BATA BALÁZS E.V.; tax number 59656029-1-27. Contact and provider details are in the provider notice.
The web application uses a sign-in session and settings stored on your device. Our own pages currently have no advertising tracker or separate analytics tracking code. External services have their own handling, described below and in the privacy notice.
| Storage | Purpose | Duration |
|---|---|---|
Web session cookie mitvigyek_session | Sign-in, associating requests with the account, session security. The name comes from the shared Mitvigyek backend. | The production setting is 14 days. Signing out removes sign-in access. |
preferred_locale, mitvigyek_locale in localStorage | Remembering your language | Until changed or browser storage is cleared |
| Temporary import state in sessionStorage | Showing a list-import result | Until processed or the session closes |
Mobile access token mitvigyek_access_token | Mobile API sign-in | Short-lived; default 15 minutes |
Mobile refresh token mitvigyek_refresh_token | Renewing sign-in | Default up to 30 days; signing out removes the local copy |
Mobile code uses a secure-storage module where available; otherwise it may rely on local web storage. We do not claim every token in every mobile version is stored exclusively in encrypted storage.
Stripe Checkout/customer portal, Google location autocomplete and, after store launch, the stores/RevenueCat may use their own technical storage and processing. Their own notices explain those processes.
The sign-in function cannot work without its necessary technical storage. Optional storage and any future analytics/marketing features will require their own legal basis and, where necessary, a prior choice before introduction. Change your language in the app or clear local data in your browser; this can sign you out or remove settings.