DRAFT — PENDING LEGAL REVIEW — NOT FOR PUBLIC USE UNTIL REVIEWED BY COUNSELThis document has been generated as a starting point and has not yet been reviewed by a qualified solicitor. It must not be shown to customers or published on any public-facing page until legal review is complete.

Cookie Policy

Last updated: [DATE] · Effective: [DATE]

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function, to improve efficiency, and to provide reporting information. We also use similar technologies such as local storage, session storage, and authentication tokens, which this policy covers alongside cookies.

2. Cookies We Use

Strictly Necessary Cookies

Always active — no consent required

These cookies are required for the CybAura website and platform to function. They cannot be disabled without breaking core functionality. Under UK GDPR / PECR and the EU ePrivacy Directive, consent is not required for strictly necessary cookies.

Name	Purpose	Duration
cybaura_session	Maintains your authenticated session. Required to keep you logged in as you navigate the platform.	Session (cleared on browser close)
cybaura_csrf	CSRF protection token. Prevents cross-site request forgery attacks on form submissions and API calls.	Session
cybaura_auth	Persists your authentication state when you select 'Remember me'. Allows re-authentication without re-entering credentials.	7 days
next-auth.session-token	Next.js authentication session cookie used by the marketing site signup and authentication flow.	Session
__cf_bm	Set by Cloudflare to distinguish between humans and bots. Required for DDoS protection and security.	30 minutes

Analytics

Optional — currently not set

If we enable website analytics in future, we will use only privacy-preserving tools such as Plausible Analytics or Fathom Analytics. These tools:

Do not set any persistent tracking cookies
Do not use browser fingerprinting
Do not cross-site track visitors
Aggregate all data before storage — no individual visitor profiles are created
Are fully compliant with UK GDPR and EU GDPR without requiring cookie consent banners

Current status: No analytics cookies are currently set on cybaura.io. We will update this policy at least 30 days before enabling any analytics tooling.

Advertising & Tracking

Not used

CybAura does not use advertising or cross-site tracking cookies.We do not use Google Ads conversion tracking, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, Twitter/X tracking, or any third-party advertising network cookies. CybAura is a B2B product; we do not retarget individual visitors across the web. We will never add advertising cookies without updating this policy and, where required by law, obtaining your consent.

3. Third-Party Cookies

The CybAura marketing site does not embed third-party content (videos, social media widgets, or external chat tools) that would set third-party cookies by default.

The CybAura application may set a cookie from Intercom (our customer support tool) if you use the live support chat. This cookie maintains the state of your support conversation. It is treated as strictly necessary for that feature. See Intercom’s Privacy Policy for details.

4. How to Control Cookies

You can block or delete cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the platform from functioning correctly.

Browser	Path to cookie settings
Chrome	Settings → Privacy and Security → Cookies and other site data
Firefox	Preferences → Privacy & Security → Cookies and Site Data
Safari	Settings → Privacy → Manage Website Data
Edge	Settings → Cookies and site permissions → Cookies and site data

For more information about cookies and how to manage them, visit allaboutcookies.org.

5. Changes to This Policy

We will update this policy before adding any new categories of cookies or changing how we use existing ones. The “Last updated” date at the top of this page will always reflect the current version. For material changes, we will notify registered users by email at least 30 days in advance.

6. Contact

Questions about our use of cookies? Contact us at privacy@cybaura.io.