Legal document archive
Document version: final-20261012Approved on 12 Oct 2026, 12:45Effective from 12 Oct 2026, 14:05

Cookie notice

Last updated: 12.10.2026.

Operator and status

Žilić Consult, obrt za usluge, vl. Tonći Žilić, Split, Zagrebačka 19; OIB 83543978252; MBO 99364352. Contact: info.innerpath.app@gmail.com

Telephone: +385 91 987 6456.

Necessary storage

Inner Path uses BEARER for signed-in API authentication (24 hours in production), refreshToken for renewing sign-in (7 days, renewed on use), innerpath_auth_role for navigation (7 days), and TWOFA_PENDING for the email verification challenge (10 minutes). These are necessary account/security cookies.

NEXT_LOCALE stores the language preference for the browser session. SER_COOKIE_CONSENT stores your cookie choices for one year. SER_ATTRIBUTION stores marketing attribution for 90 days only after marketing consent. Removing the consent cookie causes the choice to be requested again.

Stripe and Google may set payment-security and CAPTCHA storage when those functions load. Their actual cookies and expiry depend on the integration and browser. The production inventory must be verified before approval; optional analytics and marketing providers remain disabled unless configured and consented to.

Optional purposes

Analytics, advertising and optional third-party tracking require your separate choice and remain off until consent where required. Rejecting optional purposes does not prevent booking. Only integrations actually configured on this deployment may run. Marketing email consent is separate from cookie consent.

Change your choice

Use cookie preferences to change or withdraw optional consent. You can also remove stored data in your browser; removing necessary credentials may sign you out. Withdrawing consent stops future optional processing but cannot undo prior lawful processing. See the privacy notice for rights and contact details.