Cookie Policy

1. What this Policy Covers

This Cookie Policy explains how ShiftNode Digital s.r.o., operator of EM3A (em3a.ai), uses cookies, local storage, and similar technologies on the marketing site and inside the product. It supplements our Privacy Policy.

2. What Cookies Are

"Cookies" are small text files stored on your device. "Local storage" and "session storage" are similar browser storage mechanisms used by modern web apps. We use both first-party (set by em3a.ai) and third-party (set by sub-processors) storage.

3. Categories We Use

• Strictly necessary. Required for the Service to function: authentication session, CSRF protection, load balancing, cookie-consent state, and in-product preferences such as theme. These do not require consent.
• Preferences. Remember non-essential choices such as language, workspace selection, or sidebar state. Stored in local storage where possible.
• Analytics & performance. Help us understand which features are used and where errors occur so we can improve the product. Used only with your consent where consent is required.
• Marketing & attribution. Measure marketing campaigns, attribute form submissions to source, and personalize on-site messaging. Used only with your consent.

4. Storage Inventory

The Service relies on the following storage items (non-exhaustive):

• Authentication session — local storage key issued by our auth provider; required to keep you logged in.
• Cookie consent state — local storage entry recording your analytics choice on public marketing pages.
• UI preferences — theme, sidebar collapse, recent searches, and workspace context.
• Security cookies — anti-CSRF token, rate-limit fingerprints.
• Analytics — product-telemetry identifier (consent-gated).
• Marketing — approved campaign attribution and referring-site information retained in session storage from the first consented public-page visit. This can accompany a demo request. It is not stored before analytics consent.

A current detailed inventory, including sub-processor identifiers and retention durations, is available on request from privacy@em3a.ai.

5. How to Manage Your Choices

• Default setting: analytics and advertising storage are denied by default. Optional marketing analytics start only after you grant analytics consent. You can reject analytics or change your choice using the Analytics preferences control on public pages. Withdrawing consent stops future analytics collection and clears the campaign attribution retained for the browser session.
• Browser controls: most browsers let you block or delete cookies and clear local storage. Disabling strictly-necessary cookies will break login.
• Global Privacy Control (GPC): we honor GPC signals as a valid opt-out for "sharing" under the CCPA and as a withdrawal of marketing consent under GDPR for cookie-based marketing.
• Do Not Track: we honor DNT signals where they unambiguously indicate a preference.

6. Third Parties

Where we use third-party tools (analytics, demo scheduling, error monitoring, marketing attribution, support chat), those parties may set their own cookies and process limited data under our instructions. The categories of providers are listed in our Privacy Policy.

7. International Transfers

Some cookie providers may process data outside the EEA or the UK. We rely on the safeguards described in section 7 of the Privacy Policy.

8. Changes to this Policy

We may update this Cookie Policy when our tools or legal obligations change. The latest version will be posted here with an updated date.

9. Contact

Questions about cookies? Email privacy@em3a.ai.