Cookie policy

Last updated 23 April 2026

1. Operator

The operator of the FlipKing Pro platform and cookie controller is:

Prexima Reality s.r.o.
Company ID: 08600872
Registered office: Nad obcí I 2110/29, 140 00 Prague 4 - Krč
Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 321378, case no. C 321378/MSPH
Statutory body: Maxim Ponomarenko, managing director
Contact: privacy@flipking.cz

2. What cookies are

Cookies are small text files stored on your device that enable a website to recognise the browser between visits. On FlipKing Pro we use cookies, local storage (localStorage) and similar technologies.

3. Categories of cookies we use

3.1 Necessary (always active)

Required for basic Platform functionality — login, security tokens, language preference, FlipCoin cart, CSRF protection. The legal basis is the Operator's legitimate interest (Art. 6(1)(f) GDPR) and § 89 of Act No. 127/2005 Coll. on Electronic Communications — consent is not required.

next-auth.session-token — session of the logged-in user
next-auth.csrf-token — protection against CSRF attack
NEXT_LOCALE — language preference
fk_cookie_consent_v1 — record of cookie-consent grant

3.2 Analytics and product (consent)

Used to understand user behaviour in the application, detect errors and improve the product. Activated only with consent (Art. 6(1)(a) GDPR) given in the cookie banner. In this category the Operator deploys in particular:

Product analytics — movement through the application, clicks, conversion paths, time spent on page.
Session replay — rrweb technology records the user's DOM interactions (mouse movement, clicks, scrolling, key presses in input fields, with automatic masking of sensitive values such as passwords and payment data). The recording is linked to the ID of the logged-in user, if logged in.
Technical telemetry — IP address, user-agent, screen resolution, session identifier, referer. This data is linked to a specific session and, for logged-in users, to their ID; it is therefore not anonymous or merely aggregated data.

Data is stored on the Operator's servers in the EU and is used exclusively for improving the Platform and resolving issues reported by users. It is not sold to third parties.

3.3 Marketing and remarketing

The Platform currently does not deploy third-party marketing or remarketing cookies or pixels. If in the future the Operator deploys such tools (e.g. measurement of advertising-campaign conversions, remarketing), they will be placed in a separate category with separate consent and this policy will be updated at least 14 days before deployment.

4. Consent management

Consent given in the cookie banner may be changed at any time by clicking the „Cookie settings" button in the page footer. After opening the preferences, consent may be updated or reset; withdrawal of consent takes effect immediately — analytics and marketing tools stop running and any ongoing session recording is terminated.

Withdrawal of consent is technically and procedurally as easy as giving it, in accordance with Art. 7(3) GDPR. Data already recorded under the consent given remains stored for the retention period indicated in section 5, unless the user requests its erasure at privacy@flipking.cz.

In most browsers cookies can be disabled entirely, which may, however, affect the functionality of the Platform (in particular login).

5. Storage period

Session cookies — until the browser is closed.
Login token — max. 30 days.
Cookie-consent record — up to 12 months; thereafter the record is considered expired and the banner is shown again for a renewed decision.
Analytics cookies — max. 14 months.

6. Related documents

Send questions to privacy@flipking.cz.