Version 1.0 dated November 1, 2026
This English version is a translation; in case of any discrepancy, the Czech version prevails.
UNALYZE s.r.o., Company ID No. 29853575, with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, registered with the Regional Court in Brno under file No. C 153200 (“we”), uses cookies and similar storage when operating the website https://www.un-alyze.com and the related application (the “Portal”). The original domain unalyze.cz may redirect to the Portal. Contact: info@un-alyze.com.
Cookies are small text files placed on your device that allow us, in particular, to recognize your device on your next visit and to obtain information about how you use our services.
There are many kinds of these files, and they serve different purposes. If we do not strictly need a particular cookie to operate our website, we will ask for your consent before storing it.
Necessary
Necessary cookies ensure the basic functions of the Portal. These files store, for example, information that enables navigation on our website to work, information on whether you have consented to the storage of other types of cookies, and similar information. The language cookie keeps the language version of the Portal for further navigation.
The processing of necessary cookies is not subject to your consent. However, these cookies do not collect any information about you that could be used for marketing purposes.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| NEXT_LOCALE (app, cookie) | UNALYZE s.r.o. | Stores the language of the Portal (e.g., cs) for routing and displaying the corresponding language version. | 1 year. |
| analytics_consent (app, cookie) | UNALYZE s.r.o. | Stores your choice regarding analytics cookies (consent or refusal) so that the cookie banner is not shown again and the analytics tools run only with your consent. | 1 year. |
| sb-*-auth-token (app, cookie) | UNALYZE s.r.o. | Keeps you logged in: contains the access and refresh tokens and the details of the logged-in account (identifier, email, name). A longer value is split into several cookies with the suffixes .0, .1, etc. | Browser session; if “Stay signed in for 30 days” is ticked, until 30 days after login. |
| sb-*-auth-token-code-verifier sb-*-auth-token-flow-*-code-verifier sb-*-auth-token-flows-code-verifier (app, cookie) | UNALYZE s.r.o. | These cookies secure the login (PKCE method): they contain a one-time verification code that the app presents to the login service when you return from logging in with Google. The sb-*-auth-token-flow-*-code-verifier cookies store this code separately for each login in progress (no more than 5 at a time), and the sb-*-auth-token-flows-code-verifier cookie stores their list. They are also written on registration, when a confirmation email is resent, and when a password reset is requested. | Browser session; if “Stay signed in for 30 days” is ticked, no more than 30 days. They are deleted on logout; the sb-*-auth-token-code-verifier cookie is deleted as soon as the login with Google is completed. |
| un_remember (app, cookie) | UNALYZE s.r.o. | Stores your “Stay signed in for 30 days” choice on this device: contains the time at which the remembered login expires. The duration of the login cookies is set according to that time. | 30 days from login; deleted on logout and when you log in without this choice. |
| __Host-un_signup (app, cookie) | UNALYZE s.r.o. | Secures the confirmation of registration: contains a SHA-256 hash of your email address, not the address itself. This ensures that the confirmation link in the email logs in only the browser in which you registered or tried to log in to an account that has not yet been confirmed. Page scripts cannot read it (HttpOnly). | 24 hours; deleted as soon as the confirmation link logs this browser in. |
| un_assistant_session (app, cookie) | UNALYZE s.r.o. | Maintains the conversation with the assistant in the app (only after you log in): contains a shortened hash of your user identifier and the session key of the conversation. Page scripts cannot read it (HttpOnly), and the browser sends it only to the assistant’s address (/api/assistant). | Browser session. |
| un_assistant_support (app, cookie) | UNALYZE s.r.o. | Indicates that a support request form is open in the conversation with the assistant; contains only the server’s cryptographic seal. Page scripts cannot read it (HttpOnly), and the browser sends it only to the assistant’s address. | Browser session; deleted once the request is closed. |
| un-privacy (app, cookie) | UNALYZE s.r.o. | Stores the fact that the “Hide amounts” mode is on so that the page is displayed with the amounts hidden from the start. | 1 year; deleted when the mode is turned off. |
| un-level-ring (app, cookie) | UNALYZE s.r.o. | Stores the most recently displayed level ring around the profile picture (level and progress) with a short hash of your email address so that, when the page loads, the ring is displayed immediately and only to you. | 1 year. |
| un-account-title (app, cookie) | UNALYZE s.r.o. | Stores the most recently displayed name of the trading account in the app header on a phone and, where applicable, a short status of its connection, with a short hash of your email address so that, when the page loads, the header is displayed immediately and only to you. | 1 year. |
| un-accounts-dot (app, cookie) | UNALYZE s.r.o. | Stores whether the Accounts item in the navigation shows a dot indicating a problem with a connected account so that the dot is displayed as soon as the page loads. | 1 year. |
| un-notices-seen (app, local storage) | UNALYZE s.r.o. | Stores a list of the notices on the dashboard that you have already opened in this browser (no more than 60) so that they are not marked as new again. | No time limit (until deleted in the browser). |
| un-balance-chart-hidden (app, local storage) | UNALYZE s.r.o. | Stores which series of the balance chart you have hidden (deposits, withdrawals, credit). | No time limit (until deleted in the browser). |
| un_auth_email (app, session storage) | UNALYZE s.r.o. | Passes your email address to the offered login or password reset page in the same tab when registration finds that an account with this address already exists. This way, you do not have to type it again, and it does not appear in the page address. | Until it is read by the target page, which deletes it immediately; at the latest until the tab is closed. |
| unalyze:history-progress:* (app, session storage) | UNALYZE s.r.o. | Stores the highest progress displayed while the account’s trading history is loading (as a percentage) so that it does not drop after the page is reloaded. | Until the tab is closed. |
| un-intro (website, session storage) | UNALYZE s.r.o. | Stores the fact that the intro logo animation has already played in this tab so that it does not repeat the next time the page loads. | Until the tab is closed. |
| serwist-precache-v2-* (app, browser cache) | UNALYZE s.r.o. | The app’s service worker cache: stores the app’s static files (scripts, styles, fonts) and two generic pages that are displayed without an internet connection. Contains no personal or user data. | No time limit (until deleted in the browser); on the first visit after a new version of the app is released, the files that the new version does not use are removed from it. |
Analytics
We use analytics tools only to the extent of your consent. An overview of the specific analytics cookies, their providers, and their duration is given below; we will update it before turning on a new tool.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga (app, cookie) | Google (Google Analytics 4) | Distinguishes visitors: contains a random browser identifier assigned by Google. | 2 years; renewed each time data is sent; deleted when consent is withdrawn. |
| _ga_* (app, cookie) | Google (Google Analytics 4) | Stores the state of the measurement session. | 2 years; renewed each time data is sent; deleted when consent is withdrawn. |
| mp_* (app, cookie) | Mixpanel | Distinguishes devices for product analytics: contains a random device identifier and the library’s internal data; contains no name, email, user account, or trading data. | 365 days; renewed each time the tool starts; deleted when consent is withdrawn. |
| __mp_opt_in_out_* (app, cookie) | Mixpanel | Records the measurement opt-out that the Mixpanel library writes when consent is withdrawn. The app deletes the record in the same step; your refusal remains stored in the analytics_consent cookie. | Written for 365 days, but the app deletes it immediately, while consent is still being withdrawn. |
| __mpq_* (app, local storage) | Mixpanel | Stores the queue of events waiting to be sent to Mixpanel and the library’s short-lived lock keys. | Events until the batch is sent (usually within a few seconds), then an empty record; deleted when consent is withdrawn. |
| mp_tab_id_* mp_gen_new_tab_id_* (app, session storage) | Mixpanel | Stores a random identifier of the browser tab and an auxiliary flag of the library. It serves the session recording feature, which we do not use. | Until the tab is closed; deleted when consent is withdrawn. |
| mixpanelFlagsDb (app, IndexedDB) | Mixpanel | The library’s database for feature flags. We do not use this feature; the library opens the database at startup and leaves it empty. | No time limit; the app deletes it when consent is withdrawn (the deletion is completed after the page is closed or reloaded). |
| mixpanelBrowserDb (app, IndexedDB) | Mixpanel | The library’s database for session recording. We do not use recording, and the database remains empty. | No time limit; the app deletes it when consent is withdrawn (the deletion is completed after the page is closed or reloaded). |
Data from the analytics tools is processed by their providers listed in the table above. Mixpanel stores data in the European Union. Google stores data from Google Analytics 4 in the United States; for this transfer, we rely on the European Commission adequacy decision under the EU-U.S. Data Privacy Framework.
Marketing
Marketing cookies collect information about which content on our website interested you and allow us or our advertising partners to display, on this or other websites, advertising that might interest you. These cookies also allow us to limit the number of times our advertising is shown on your device and to measure the effectiveness of our advertising campaigns.
We will run marketing tools only after you consent. Refusing consent does not prevent you from using the Portal. You can change your choice at any time via the permanently available cookie settings. If we do not use any marketing tools, their list remains empty.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| None listed | — | No cookies in this category are listed in this version of the overview. | — |
Opting out of cookies
You can change your choice of the analytics and marketing categories at any time in the cookie settings, which are available from every Portal page on which we use analytics or marketing tools. Optional tools are turned off by default, and refusing is as easy as accepting. You can also delete cookies in your browser settings; disabling necessary storage may limit the functionality of the Portal.