Responsible entity: AURA SUSHI (aurasushi.pl).

Cookie: aura_cookie_consent.

Purpose: remembering settings, respecting your decision on later visits and demonstrating that your choice was recorded.

Pseudonymous decision register: we record only a random consent ID, selected categories, the notice and plugin versions, the type of change and the server time.

What the plugin does not record in the register: adresu IP, User-Agent, imienia, e-maila, identyfikatora konta, adresu odwiedzanej strony ani referrera.

Abuse prevention: an anonymous endpoint uses a short-lived counter based on an HMAC hash of the network address visible to the server. The hash is not added to the decision register and expires after about 2 minutes.

Retention: settings cookie — 180 days; register entry — 365 days, then automatically deleted.

Responsible entity: AURA SUSHI (WooCommerce technology).

Cookies: woocommerce_cart_hash i woocommerce_items_in_cart (sesja) oraz wp_woocommerce_session_* (do 2 dni).

Purpose: maintaining the cart and order session and ensuring the checkout process works correctly.

Retention: cart cookies expire when the browser session ends; the customer session cookie is stored for up to 2 days.

Responsible entity: AURA SUSHI (aurasushi.pl).

Technology: essential shop session.

Data and purpose: delivery address and additional information — to check delivery availability and conditions and retain details during checkout.

Retention: do 24 godzin.

Providers: OpenFreeMap and UNPKG.

Technology: external map resources.

Data and purpose: IP address and basic browser and requested-resource information — to display the delivery area map.

Retention: while loading the map; further processing follows the providers’ policies.

Payment provider: PayU S.A. (Poland).

Purpose: secure authorisation and settlement after online payment is selected. PayU is activated at the user’s request after choosing this payment method.

Cookies and retention: technical cookies on PayU domains, generally for the payment session; details are set out in the PayU privacy notice.

Provider: Google Ireland Limited.

Cookies: _ga i _ga_<identyfikator>.

Data and purpose: page address, events, device and browser information, and approximate location derived from IP — to produce statistics and improve the website.

Retention: up to 2 years by default; the browser may shorten this period. GA4 cookie information.

Technology provider: WooCommerce Ireland Ltd and Automattic group companies.

Technologies: WooCommerce Analytics and stats.wp.com scripts; the mechanism may use tk_* or jp_* identifiers or send events without storing a cookie.

Data and purpose: IP address, page address, referrer, language, device and browser type, and shop events — to measure traffic and improve the service. This does not include payment card details.

Retention: identifiers may be session-based or persistent; the provider does not specify a single period for all events. Details: polityka cookies i Automattic privacy policy.

Responsible entity: AURA SUSHI (aurasushi.pl).

Technology: browser local storage.

Data and purpose: recently viewed product information — to tailor product recommendations on the website.

Retention: up to 30 days. Data is deleted when marketing consent is withdrawn.

Provider: Google Ireland Limited.

Cookies: including _gcl_* and _gac_* (up to 90 days); where third-party advertising cookies such as IDE or id are used, they may last up to 13 months in the EEA.

Data and purpose: ad click identifier, page address, device data, conversions and campaign-related orders — to measure advertising effectiveness and, with consent, personalise ads.

More information: how Google uses cookies.

Responsible entity: AURA SUSHI (WooCommerce feature).

Cookies: sbjs_session (30 minut) oraz sbjs_udata, sbjs_first, sbjs_current, sbjs_first_add, sbjs_current_add i sbjs_migrations (sesja).

Data and purpose: referrer, UTM parameters, entry page, device type, page view count and technical data — to identify the source of the visit that led to an order.

Retention and recipients: attribution data is saved with the order after it is placed; if WooCommerce Analytics sharing is active, aggregated order data may be sent to Automattic. WooCommerce documentation.