Privacy policy
Kanapa is a sofa configurator: you build a sofa and try its fabrics in a 3D studio. You don’t sign up, and nothing you do in the studio is sent to us unless you accept analytics on the cookie card. Apart from the technical data any website’s host receives on every visit (see “Who receives the data”), the only personal data involved is that website analytics, and only if you agree to it.
Who is responsible
The controller of your data is Przemysław Rakowski, Poland. Write to przemek.rakowski@gmail.com with any question about your data or to use your rights.
What we collect, and only with your consent
If you press Accept on the cookie card, we use Google Analytics 4 to see how the configurator is used, so we can make it clearer and easier. It records:
- that you visited, how long you stayed and how far you got (for example: the studio loaded, you changed the sofa, took the tour or the guided configurator, opened the quote, pressed “Request a quote”, copied or opened a configuration link);
- what you did in the studio: the layout, upholstery, colour, firmness, piping and scatter cushions you chose, how you arranged the blocks (how many there were), the views you chose, how often you pressed the cushions, and the estimate shown when you opened the quote;
- if the studio couldn’t be shown on your device, the reason (for example, no WebGL 2, or a file that didn’t load);
- technical details: browser, device type, screen size, language, and an approximate location (country or city) that Google derives from your IP address (Google Analytics doesn’t store the IP address itself);
- the pages you open, without any configuration in their address, the address of the page that sent you here if your browser passes it on, and a random ID stored in a cookie, so repeat visits from the same browser are recognised as the same visitor.
The studio loads while the cookie card is up. What you do before you answer is held in your browser’s memory only: it is sent if you press Accept, and thrown away if you press Reject or leave without answering.
We don’t collect your name, email or anything you type, we don’t use the data for advertising (Google’s ad features and Google signals are switched off), and we don’t sell it. “Request a quote” is a demonstration: it sends nothing anywhere.
If you press Reject, or don’t answer, Google Analytics is never loaded and nothing is sent to Google. Consent is voluntary: the configurator works fully without it.
The events in detail
For the curious, every event the studio sends after you accept, and what it carries:
| Event | When, and what it carries |
|---|---|
scene_ready, scene_enter |
The studio is ready; you went in: how long it took to load, how long you waited, the quality level, guided or free |
layout_change |
The layout you chose (its id, or own for one you arranged), how many
blocks
|
collection_change, colour_change,
firmness_change, piping_change,
cushion_change
|
The upholstery, colour, firmness, piping (and its contrast colour) or scatter cushions (how many, what size) you chose |
arrange_edit |
You opened or closed “Arrange the blocks”, or changed the blocks: how many |
shot_change |
The view you chose (for example, the front or a close-up) |
press |
You pressed the cushions: the first time, then every tenth press, with the count |
tour_start, tour_step, tour_end |
The detail tour: where you started it, which step, finished or not |
configure_start, configure_step,
configure_edit, configure_end
|
The guided configurator: where you started it, which step, an “Edit” used, finished or not |
quote_open, quote_request |
You opened the quote, or pressed “Request a quote”: the estimate and its currency, where you opened it, the layout |
link_copied, link_opened |
“Copy link” used (to the clipboard or by hand), or the page opened from a configuration link (its version and whether every part of it could be used); both with the layout, never the link itself |
render_error |
The studio couldn’t be shown: whether the browser can’t draw it, a file didn’t load, or the drawing stopped, and the technical reason |
ui_locale |
On every event: the page’s language, English or Polish |
The choices also say whether you made them in the panel or the guided configurator. Google Analytics also records its own page views and engagement time.
Why, and on what legal basis
To understand which parts of Kanapa people use and where they get stuck, and improve it. The legal basis is your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time; that doesn’t affect what was processed before.
The technical data the server receives on every page view is processed on the basis of our legitimate interest in delivering the site and protecting it from abuse (GDPR Art. 6(1)(f)).
We make no automated decisions about you and don’t profile you (GDPR Art. 22): the analytics only shows how the configurator is used.
Cookies and storage
| Name | What it does | How long |
|---|---|---|
_ga |
Google Analytics: a random ID that recognises this browser on later visits. Only after Accept. | 2 years |
_ga_… |
Google Analytics: keeps the state of the current visit. Only after Accept. | 2 years |
kanapa:consent |
Your answer on the cookie card (browser storage, not a cookie; never sent anywhere). | Until you clear it |
kanapa:config |
The sofa you configured (its layout, upholstery, colour, firmness, piping and cushions), so a reload keeps it (browser storage; never sent anywhere). | Until you clear it |
kanapa:units |
Whether you measure in centimetres or inches (browser storage; never sent anywhere). | Until you clear it |
kanapa:lang |
The language you chose, saved only when you choose one: with the language switch or with this policy’s link to its other language. On the main address it opens the page in that language (browser storage; never sent anywhere). | Until you clear it |
kanapa:press-hint |
That you have pressed a cushion once, so the “Press the cushions” hint doesn’t come back (browser storage; never sent anywhere). | Until you clear it |
kanapa:closeup |
Whether a change of fabric takes the camera close, if you turned that off (browser storage; never sent anywhere). | Until you clear it |
The kanapa: entries are strictly necessary for things you ask for (keeping your
answer, your sofa, your units, your language and the studio as you set it), so they need no
consent: the ePrivacy Directive’s exemption (Art. 5(3)) and, in Poland,
Art. 399(3) of the Electronic Communications Law.
Configuration links
“Copy link” puts the sofa you configured into the link itself (its layout, fabric, colour, firmness, piping and cushions), so whoever opens it sees the same sofa and its estimate at current prices, usually in the same language. The link holds nothing else: no name, no ID. Opening one replaces the sofa this browser remembered. If you accepted analytics, it records that a link was copied or opened, with the layout (see above), but never the link itself.
Who receives the data
Google Ireland Limited, as our processor for Google Analytics. Google may process the data in the United States; such transfers are covered by the EU–US Data Privacy Framework and Google’s standard contractual clauses.
Cloudflare, Inc., as our processor that serves the site. Like any web server, it receives your IP address and technical browser data on every page view, only to deliver the page and protect it from abuse. We keep no server logs of our own. Cloudflare may process data in the United States under the EU–US Data Privacy Framework and standard contractual clauses.
How long it is kept
Google Analytics keeps event- and user-level data for 14 months and then deletes it automatically; only aggregate statistics that can’t be tied to your browser are kept longer. The cookies expire as listed above, or are deleted when you withdraw consent.
Your rights
You can ask for access to your data, its correction or deletion, restriction of processing,
and data portability. You can withdraw your analytics consent at any time (see “Change your
choice”), and you can object to the processing of the technical data by the server. Because
analytics data is tied only to a random browser ID, we may need that ID to find it (the
value of the _ga cookie). You also have the right to complain to a supervisory
authority; in Poland that is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
Change your choice
Open the cookie card again here, or with “Cookie settings” at the foot of the configuration panel (on a phone, under the sheet’s choices). Rejecting after accepting switches analytics off, deletes its cookies and reloads the page without it: nothing new is recorded or sent after that. Events already recorded under your consent may still leave as the page reloads.
Changes to this policy
If what we collect changes, we’ll update this page and the date at the top.
Language versions
This policy is also published in Polish. For visitors in Poland, the Polish version prevails.