Legal Document

Cookie Policy

Effective Date: 1 January 2026•Last Updated: 1 January 2026

This Cookie Policy explains how Ciphyrs Technologies Private Limited uses cookies and similar tracking technologies when you visit our website or use our services. It should be read alongside our Privacy Policy.

1. What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, provide a personalized experience, and give website owners information about how their site is used.

In addition to traditional cookies, we use related technologies including: Local Storage (persistent key-value storage in your browser), Session Storage (temporary storage cleared when you close the tab), and Pixel tags/web beacons (small images that signal page loads). This policy covers all of these technologies collectively.

2. Cookie Categories and Legal Basis

Under the EU ePrivacy Directive and GDPR, we categorize our cookies by purpose and obtain consent where required:

Strictly Necessary
Legal basis: Legitimate Interest / Contract

Required for the website to function. No consent required under ePrivacy Directive Art. 5(3).

Functional
Legal basis: Consent

Enhance your experience. Require opt-in consent in the EU/UK and other jurisdictions with ePrivacy laws.

Analytics
Legal basis: Consent

Help us understand usage. Require opt-in consent. Data is anonymized before processing.

Marketing
Legal basis: Consent

Measure marketing effectiveness. Require opt-in consent. No third-party ad targeting cookies used.

3. Detailed Cookie Inventory

The following tables list all cookies and similar technologies used by Ciphyrs, organized by category. This inventory is reviewed quarterly.

Strictly Necessary

Required

These cookies are required for the website to function. They cannot be disabled.

Cookie NamePurposeDurationType
cph_sessionMaintains your authenticated session. Expires when browser closes.SessionHTTP Cookie
cph_csrfCross-Site Request Forgery protection token. Required for form submissions.1 dayHTTP Cookie
cph_authStores your JWT authentication token for dashboard access.30 daysHTTP Cookie (Secure, HttpOnly)
cph_tenantIdentifies your tenant context for multi-tenant routing.30 daysHTTP Cookie (Secure)

Functional

Optional

These cookies enhance functionality and personalization. Disabling them may limit some features.

Cookie NamePurposeDurationType
cph_themeStores your UI theme preference (dark/light).1 yearLocal Storage
cph_langStores your language/locale preference.1 yearLocal Storage
cph_docs_sidebarRemembers which documentation section you last viewed.30 daysLocal Storage
cph_dashboard_layoutSaves your dashboard widget layout preferences.90 daysLocal Storage

Analytics

Optional

We use analytics cookies to understand how visitors use our website and improve our services. All data is anonymized.

Cookie NamePurposeDurationType
_gaGoogle Analytics — distinguishes users for aggregate traffic analysis. No PII is sent to Google Analytics.2 yearsHTTP Cookie
_ga_*Google Analytics 4 session state.2 yearsHTTP Cookie
ph_*PostHog product analytics — tracks feature usage to improve UX. Self-hosted in our infrastructure.1 yearHTTP Cookie
cph_session_trackInternal session analytics for funnel analysis. No PII captured.30 minutesSession Storage

Marketing

Optional

Marketing cookies are used to deliver relevant advertisements and measure campaign effectiveness. We do not currently use third-party advertising cookies.

Cookie NamePurposeDurationType
cph_utmStores UTM campaign parameters (utm_source, utm_medium, etc.) to measure marketing channel effectiveness.30 daysLocal Storage
cph_referrerRecords the referring domain to attribute sign-ups to marketing channels.30 daysHTTP Cookie

4. Third-Party Cookies

Some cookies on our website are set by third-party services that appear on our pages. We have limited control over these cookies. The third parties we use and their privacy policies are:

Google Analytics

Website traffic analytics. We have enabled IP anonymization. No PII is sent. Data is retained for 14 months.

https://policies.google.com/privacy →
PostHog

Product analytics (self-hosted in our infrastructure — your data does not leave our servers).

https://posthog.com/privacy →
Stripe

Payment processing. Stripe may set cookies on payment pages. We do not have access to Stripe's cookies.

https://stripe.com/privacy →

5. Managing Cookies

5.1 Cookie Consent Manager

When you first visit our website, you will see a cookie consent banner. You can choose to accept all cookies, only strictly necessary cookies, or customize your preferences by category. You can change your preferences at any time by clicking "Cookie Settings" in the footer.

5.2 Browser Controls

Most browsers allow you to manage cookies through their settings. Common options include: blocking all cookies, accepting cookies from specific sites, or deleting cookies when you close the browser. Note that blocking strictly necessary cookies will prevent Ciphyrs from functioning properly.

Chrome
Settings → Privacy and Security → Cookies
Firefox
Preferences → Privacy & Security → Cookies
Safari
Preferences → Privacy → Cookies
Edge
Settings → Privacy → Cookies

5.3 Opt-Out Links

You can opt out of Google Analytics across all websites: https://tools.google.com/dlpage/gaoptout

You can opt out of interest-based advertising in the EU: Your Online Choices (EU)

6. Do Not Track (DNT)

Some browsers include a Do Not Track (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, there is no industry standard for responding to DNT signals. Ciphyrs does not currently respond to DNT browser signals. We will update this policy if an industry standard is established.

7. Cookies in Our API and SDK

The Ciphyrs REST API and SDK are server-to-server tools and do not use browser cookies. Authentication for API calls uses API keys transmitted via HTTP headers (not cookies). If you are building a web application using our JavaScript SDK, please review the SDK documentation for information about any client-side storage it uses.

8. Updates to This Policy

We review and update this Cookie Policy quarterly. When we add, change, or remove cookies, we update this policy and, where required by law, re-obtain your consent. The "Last Updated" date at the top of this page reflects the most recent revision.

9. Contact Us

For questions about our use of cookies or to exercise your rights related to cookie-based data processing:

© 2026 Ciphyrs Technologies Private Limited. All rights reserved. Ciphyrs™ is a registered trademark of Ciphyrs Technologies Private Limited. This Cookie Policy is effective as of 1 January 2026.