Cookie Policy

This Cookie Policy describes the use by Aubrium Technologies L.L.C ("Aubrium") of cookies and comparable technologies on its website and platform. It is to be read together with the Privacy Policy, which describes the processing of personal data more generally.

1. Cookies and comparable technologies

1.1 A cookie is a small text file placed upon a device by a website or application and subsequently recalled by a server within the domain which placed it.

1.2 Aubrium also uses comparable technologies, including local storage and session storage, which retain information within the browser, and pixels and comparable request-based mechanisms, which record that an event has occurred. References in this Policy to cookies include those technologies.

1.3 A cookie placed by the domain being visited is a first-party cookie. A cookie placed by another domain is a third-party cookie.

1.4 A session cookie is deleted when the browser is closed. A persistent cookie remains until it expires or is deleted.

2. Categories used

2.1 Strictly necessary. Required for the operation and security of the Services. These authenticate users, maintain a session while a user navigates the platform, keep an unfinished sign-up together, protect forms against misuse, and balance load. The Services cannot be provided without them. Blocking them prevents sign-in and the use of core functionality.

2.2 Functional. Record preferences such as display settings, language and previously dismissed notices, in order that the Services are presented consistently between visits.

2.3 Analytics and performance. Enable Aubrium to understand how the Services are accessed and used, to measure the performance of features, and to identify and diagnose faults.

2.4 Security and fraud prevention. Assist in distinguishing genuine users from automated traffic and in protecting accounts and payments against fraud and unauthorised access.

2.5 Advertising and conversion measurement. These technologies enable Aubrium and its measurement partners to record that a visit, a registration or a purchase followed a particular marketing activity, and to assess the effectiveness of that activity.

2.6 Aubrium does not sell data collected by means of cookies.

2.7 The cookies and comparable technologies used on the Services, their purpose and their duration, are as follows:

• Sign-in session (strictly necessary; Aubrium, through its authentication provider Supabase; cookies beginning "sb-"). Keeps a signed-in user signed in. Up to 400 days, or until the user signs out.
• Sign-up session (strictly necessary; Aubrium). Keeps an unfinished sign-up and its checkout together, including when a user returns through the reminder email. 7 days.
• Preferences (functional; Aubrium). Remember the display theme, the reduced-motion setting on the website, the Instagram account last viewed, the user's time zone and the layout of certain panels. 1 year each. Local storage also holds table and filter preferences on the device until they are cleared.
• Advertising attribution (advertising measurement; Aubrium). Records the advertisement, referring source and page through which a visitor arrived ("aub_attr", 7 days, with a copy in session storage), and, where the visitor arrived from a Meta advertisement, Meta's click identifier in Meta's own format ("_fbc", 90 days).
• Product analytics (analytics and performance; PostHog; a cookie beginning "ph_" and local storage). Measures how the website and platform are used and records errors, and on the pages of the platform and of checkout records masked session replays, as described in clause 11.6 of the Privacy Policy. 1 year.
• Tag management and advertising pixels (advertising measurement; Google and Meta). Where Aubrium enables its tag manager, Google's tags and Meta's pixel may set cookies, including "_ga" (up to 2 years), "_gcl_au" (90 days) and "_fbp" (90 days), to measure visits and purchases which follow an advertisement. The tag manager does not load on Aubrium's administration pages.
• Bot protection (security; Cloudflare Turnstile). Distinguishes genuine users from automated traffic on sign-in, sign-up and contact forms. Operated from Cloudflare's own domain.
• Checkout security (security and fraud prevention; on the checkout pages only). The card field is operated by a specialist payment provider from its own domain. The payment and fraud prevention providers engaged by Aubrium may set cookies, or store an identifier in local storage, for up to 1 year, to recognise a device and to protect payments against fraud. A card issuer's authentication page, where one is shown, operates under that issuer's or payment provider's own terms.

3. Third-party services

3.1 The third-party service providers described in clause 2.7 place or read cookies and comparable technologies for the purposes stated there, including PostHog for product analytics, Google and Meta for advertising measurement where enabled, Cloudflare for bot protection, and the providers of payment processing and fraud prevention on the checkout pages.

3.2 Aubrium does not control the operation of a third-party cookie. Its use is governed by the privacy and cookie policies of the relevant third party.

3.3 Where a payment is made, the provider operating the payment field may place a cookie upon its own domain for the purpose of operating that field. Aubrium cannot read such a cookie.

4. Your choices

4.1 Cookies which are strictly necessary cannot be declined while the Services are used, because the Services cannot be provided without them.

4.2 Cookies which are not strictly necessary may be blocked or deleted at any time by means of the browser controls described in clause 5. Doing so does not prevent access to the Services.

4.3 Where applicable law confers a right to object to, or to refuse, a category of cookie which is not strictly necessary, that right may be exercised by means of those controls or by contacting Aubrium using the details in clause 7.

4.4 An objection does not affect the lawfulness of any use carried out before it was raised.

5. Managing cookies

5.1 Most browsers permit cookies to be examined, blocked and deleted, permit preferences to be set for individual sites, and offer a private browsing mode.

5.2 Blocking strictly necessary cookies prevents sign-in and the use of core functionality. Blocking other categories does not prevent access to the Services.

5.3 Deleting cookies removes the preferences recorded by them, such as the display theme, and signs the browser out of the Services.

5.4 Cookie controls operate per browser and per device. A preference expressed on one device does not apply to another.

6. Amendment

6.1 Aubrium may amend this Policy from time to time in order to reflect a change in the technologies used, in the Services, or in applicable law. An amendment takes effect upon publication.

7. Contact

Enquiries concerning this Policy: legal [at] aubrium.com

Legal notices: legal [at] aubrium.com