Skip to content

New release“From ChatGPT to a digital team” — read the first chapter free.Read an excerpt

VANTIORBOOKS

Legal

Cookies, Storage and Marketing Policy

Version
2026-11-05
In force since
2026-11-05
Content revision
r-e0b77aae80fb

Language versions. This is a translation of the Polish original and is provided for information. The binding version is the Polish one: /pl/legal/cookies. That precedence does not deprive a consumer of any right under mandatory provisions of law — including the mandatory provisions of the law of the country of their habitual residence, where the applicable conflict-of-law rules give them that protection — and it does not limit anyone's rights against the party responsible in a given situation (§17.2 and §19.3 of the Terms).

1. Principle

Vantior uses cookies and similar mechanisms only to the extent consistent with the Electronic Communications Law, the GDPR and the actual configuration of the website.

2. Categories

Essential

These may include cookies/the session needed for sign-in, security, remembering the checkout process, settings required for the requested service and protection against abuse. Where a given entry is strictly necessary for transmission or for performing the service requested by the user, consent under the Electronic Communications Law may not be required.

Preferences

For example the chosen language, the reader settings or the number of items per list page. We store them only when you set them yourself — they perform the service you ask for, so they do not require consent (Article 399(3) of the Electronic Communications Law); you can delete them in your browser settings.

Analytics

As at the date of publication: we collect visit statistics (which pages are viewed and how fast they load) only with your consent.

  • Vercel Web Analytics and Vercel Speed Insights (Vercel Inc., the shop's hosting provider): the browser sends the address of the shop page visited without its parameters and fragment, the page you came from, the country, the type of device, the operating system and the browser, and Speed Insights also the page's loading times. Web Analytics also counts selected actions in the shop: viewing a book's or an author's page, opening the free sample and reading it to the end, adding to the cart, opening the payment window, a discount code being accepted (without the code itself), using the search (without the words typed) and a paid order (currency and number of items, without the order number). According to Vercel, Web Analytics works without third-party cookies and recognises a visitor by a hash of the request data, which it discards after 24 hours. Nothing is sent from the account, library, reader, listening and author and partner portal pages.
  • PostHog (PostHog Inc., cloud in the EU region): the browser sends the visited page to our server, which passes it on to PostHog — without the IP address, with a random browser identifier (vb_aid, 12 months).

Without consent none of these mechanisms runs and nothing is passed on.

Marketing

Off by default. Launching them requires prior consent where the law requires it.

3. Consent banner

On your first visit a banner asks for consent to analytics and marketing cookies. "Accept all" and "Reject optional" are equally easy to reach, and under "Settings" you choose the categories one by one — none is ticked in advance. Until you choose, only necessary cookies work. We remember your choice in the vb_consent cookie for 12 months and then ask again; we also ask again when the banner wording changes. Every choice is recorded in the consent register — with the banner wording version, the language and the date, without the IP address and without account data.

4. Paddle

The Paddle checkout may use its own cookies/storage necessary to complete the payment securely.

5. Google

Google OAuth may use mechanisms on Google's own domain.

6. E-mail marketing

  1. A newsletter/electronic marketing is sent solely after the prior consent required by the Electronic Communications Law.
  2. The consent is separate from acceptance of the Terms and from the purchase.
  3. Example wording: "I want to receive from Vantior Group Dawid Pągowski, at the e-mail address given, commercial information and direct marketing concerning Vantior Books. I know that I can withdraw this consent at any time."
  4. The box may not be ticked by default.
  5. Every marketing e-mail should contain a simple way to unsubscribe.

7. SMS/telephone marketing

Do not launch without a separate analysis of the channel and the appropriate consent. Consent for e-mail should not automatically be treated as consent for SMS/telephone.

8. Affiliate and partner marketing

A Vantior partner must comply with the Electronic Communications Law and the GDPR. They may not send spam "on behalf of Vantior" or build databases without their own legal basis. Affiliate material should be marked as advertising/cooperation in a way that is clear to the recipient.

9. Cookie table

As at 05.11.2026, based on a review of the site's code; before the site is opened to the public we will confirm it with a cookie scan of the live site.

Necessary (without consent — Article 399(3) of the Electronic Communications Law):

  • vb-customer-token — the signed-in customer's session — 7 days;
  • vb_cart — the cart — 30 days;
  • vb_order_access — access to a purchase made without an account — 30 days;
  • vb_consent — your cookie choice — 12 months;
  • vb_locale — the language, if you change it yourself — 12 months;
  • vb_oauth_state, vb_oauth_nonce, vb_oauth_verifier, vb_oauth_provider, vb_oauth_started_by — secure sign-in with Google, Apple or Microsoft — 10 minutes;
  • payload-token, payload-theme, payload-lng — staff in the Studio panel only: the session (2 hours), the panel's appearance and language;
  • browser storage (localStorage): vb-reader-preferences (reader settings), vb-reader:… and vb-listen:… (the reading and listening position for a purchase without an account), vb.pref.listPageSize (items per list page) — until deleted in the browser.

Analytics (only with consent):

  • vb_aid — a random browser identifier for visit statistics (PostHog, EU region) — 12 months;
  • Vercel Web Analytics and Speed Insights — no cookies; the hash of the request data on Vercel's side — 24 hours;
  • browser storage (localStorage): vb_purchase_counted:… — that a paid order has already been counted in the statistics, so that it is not counted twice — until consent is withdrawn (we then delete it) or it is deleted in the browser.

Marketing (only with consent):

  • vb_ref — a partner's code from a referral link, so that the partner earns a commission on the purchase — 30 days;
  • vb_ref_seen — so that reloading the page does not count as a new referral — 30 minutes.

Payment: on the payment page Paddle's window may store its own cookies and data needed for a secure payment — under Paddle's privacy and cookie policy.

10. Changing consent

You can change your choice at any time with the "Cookie settings" button in the footer of every page. Withdrawing consent takes effect at once — we delete the analytics and marketing cookies and the analytics entries in the browser's storage, and statistics stop being sent — and does not affect the lawfulness of processing before the withdrawal. You can also delete cookies in your browser settings.

Main legal sources

Previous versions

  • 2026-11-05 — in force since 2026-11-05 — version in force
  • 2026-10-20 — in force since 2026-10-20
  • r-2e3b21fa0934