Home›Cookie and local storage notice
Cookie and local storage notice
What we store on your device, and what — if anything — you need to decide about it.
This notice covers Article 5(3) of Directive 2002/58/EC, as transposed in Cyprus by the Regulation of Electronic Communications and Postal Services Law 112(I)/2004: the rule that says storing information on, or reading information from, your device needs your consent unless it is strictly necessary to provide the service you asked for.
The portal and apps
We use only strictly necessary cookies and browser storage:
| What | Where | Why | Kept |
|---|---|---|---|
| Session and refresh token | Cookie | Keeps you signed in and lets the app renew your session without asking for your password again | Until you sign out, or the token expires |
| Cross-site request forgery token | Cookie | Prevents another site from making requests as you | Session |
| Language, theme and interface preferences | localStorage | Remembers how you like the interface | Until you clear it |
| Consent and notice acknowledgements | localStorage | So we do not ask you the same thing every visit | Until you clear it |
There are no advertising cookies, no analytics cookies, and no third-party tracking scripts in the web portal.
Because every item above is strictly necessary for a service you have asked for, Article 5(3) does not require your consent for it, and there is no consent banner to click. Any banner you see is telling you something, not asking you.
You can still refuse. Blocking or clearing these through your browser is your right — but the session cookie is what signing in is, so blocking it means you cannot stay signed in.
Training videos
The portal’s training videos are hosted on YouTube, but nothing is requested from YouTube until you press play. The list of videos and their preview images come from our own server.
When you press play, the player loads from YouTube’s privacy-enhanced domain, www.youtube-nocookie.com. That sends your IP address and browser details to Google, and from then on Google may store cookies or similar identifiers on your device. What Google does with that data is governed by Google’s privacy policy. The first time you open a video we say this beside the play button, and the player loads only when you press it. We then remember that you have seen that notice (the consent and notice acknowledgements row above), so later videos start as soon as you open them.
Mobile applications
The mobile apps do not use cookies. They store an authentication token in the operating system’s secure storage, plus your interface preferences.
They also include Google Firebase Crashlytics (crash reporting) and Firebase Analytics (feature usage), which store identifiers on the device. That storage is not strictly necessary, so it is properly a matter for your choice. Today that choice is made through your operating system’s privacy settings; we are adding an in-app switch, defaulted off. Section 4.2 of the Intellayer privacy policy and section 4.5 of the customer privacy policy say the same thing, and we would rather flag it than quietly rely on a settings screen you did not know about.
This website
The marketing site you are reading sets no cookies unless you accept analytics.
Google Analytics, only if you accept. On your first visit a banner asks whether we may use Google Analytics to understand how the site is used: which pages are read, how visitors arrive, and roughly which country they are in. Until you choose Accept, nothing is loaded from Google and nothing is stored for it on your device. If you accept:
| What | Where | Why | Kept |
|---|---|---|---|
_ga | Cookie | Lets Google Analytics tell that two page views come from the same browser | 13 months |
_ga_BFCRBDXVZ1 | Cookie | Keeps the state of your current visit, for the same purpose | 13 months |
Google Analytics is provided by Google Ireland Limited. Data may also be processed by Google LLC in the United States, which is certified under the EU–US Data Privacy Framework (Commission adequacy decision (EU) 2023/1795). Google states that Google Analytics 4 does not log or store IP addresses. We have switched off Google signals and advertising personalisation, so the data is used for site statistics only, never for advertising. Google keeps the event data for at most 14 months. We rely on your consent — Article 6(1)(a), and Article 5(3) for the cookies — and you can withdraw it at any time.
Your choice itself is kept in your browser’s localStorage (intellayer-analytics-consent) so that we do not ask on every visit. That is strictly necessary to respect the choice, and we ask again after 12 months.
The one external request
One request still leaves your browser to a third party when a page loads: the Material Symbols icon font, served by Google Fonts. That sends your IP address and browser user agent to Google.
We are not pretending this is nothing. Self-hosting the icon font removes it entirely, the text typeface has already been moved to self-hosting, and the icon font is being migrated. Until it is, that request is disclosed here rather than left for you to find in developer tools.
Apart from that font, Google Analytics (only after you accept it) and a training video’s YouTube player in the portal (only after you press play), no other font, script, image, or asset is fetched from a third-party server.
Changing your mind
- Google Analytics on this site: use Cookie settings at the bottom of any page. Declining after you have accepted deletes the Google Analytics cookies from this site and stops any further measurement.
- Browser storage: clear it in your browser’s settings for this site. You will be signed out and your preferences will reset.
- Mobile diagnostics: your operating system’s privacy settings, as described above, or email [email protected] and we will exclude your account.
- Anything else: [email protected].
Contact
Intellayer, Alamanas 50, Dali, Nicosia 2547, Cyprus — [email protected].
Related: customer privacy policy · Intellayer privacy policy · legal information.