Cookie and Browser Storage Policy
Company and scope
This policy concerns Enigma Labs OÜ on /eu. The privacy notice explains the company, purposes, providers, staff access and applicable law. Contact privacy@getenigmalabs.com.
Cookies and local storage
We use browser storage to remember privacy choices separately for each company and policy version.
| Storage | Purpose | Duration |
|---|---|---|
enigma-consent-{entity}-{policyVersion} cookie | Remember choices for the relevant company and policy version | 365 days from creation or update, unless cleared earlier |
| Local storage with the same name | Keep the choices in your browser | Until cleared or replaced |
enigma-consent-{entity}-{policyVersion}-pending-{consent-service-address} local storage | Hold the latest undelivered choice for our self-hosted consent service; the address suffix is URL-encoded | Until successfully delivered, replaced by a newer choice or cleared |
c15t-storage-test-key local storage | Check whether browser storage is available | Removed immediately after the check |
Region selection is recorded in the URL, not a region-preference cookie. Consent records sent to our self-hosted service are stored in the United States; the privacy notice addresses server-side processing.
Cloudflare Turnstile protects our contact forms against automated abuse. It processes technical signals, including IP address, browser information and the site being visited, and provides a single-use verification token. Our website sends the token and your IP address to Cloudflare for verification. Tokens expire after five minutes; this is token validity, not a cookie lifetime. Turnstile pre-clearance is disabled, so our widget does not issue a cf_clearance pre-clearance cookie.
Cloudflare also uses security signals to improve its bot detection, as explained in its Turnstile Privacy Addendum.
Optional processing
Intercom live chat loads only after you grant optional functionality consent for the relevant company and policy version. It processes technical browser/network information and the details and messages you submit. Refusing or withdrawing consent leaves email and contact forms available. Use privacy settings to withdraw chat consent.
The shared US-hosted workspace supports one active chat tab per browser at a time. Withdrawing consent, switching to another company’s section or leaving the website ends the chat session and removes accessible Intercom identifiers. This does not delete messages already submitted. The privacy notice explains message retention and international processing.
| Optional chat storage | Purpose | Duration |
|---|---|---|
enigma-chat-storage-check local storage | Check whether browser storage is available before opening chat | Removed immediately after the check |
intercom-session-[app_id] | Maintain the chat session and conversation access | Session configured for up to 7 days; activity can renew it. Cleared earlier when our chat session ends |
intercom-device-id-[app_id] | Identify the device for chat security | Intercom default: 270 days, renewed by activity; cleared earlier when our chat session ends |
intercom-id-[app_id] and associated local storage | Recognise the browser during chat | Cleared when our chat session ends; the local-storage entry has no automatic expiry of its own |
These are first-party identifiers on this website. Intercom’s storage documentation describes the provider’s defaults; our integration clears accessible identifiers earlier as described above.
Email marketing and campaign open/click measurement are described in the privacy notice. Those choices are separate from browser-storage settings.
Managing choices
We do not load advertising or analytics scripts. Global Privacy Control (GPC) does not automatically withdraw a live-chat choice you have saved. Live chat requires separate functionality consent, which you can refuse or withdraw through privacy settings. We do not apply separate behaviour to the older Do Not Track (DNT) signal.
Use the privacy settings control to review or change your browser choices. You can also clear cookies and local storage through your browser. Clearing those local records does not itself unsubscribe you from marketing or delete records already held on our servers. For those requests, use the methods in the privacy notice or contact privacy@getenigmalabs.com.
Choices for one company or policy version are not copied to another. If browser storage is unavailable, optional scripts remain disabled.
Applicable rights
Choosing a region does not waive applicable privacy or electronic-communications rights. For /eu these include GDPR and applicable national ePrivacy rules; /ae retains DIFC obligations and other mandatory territorial law; /us remains subject to applicable US, Canadian and other American-market requirements. See the regional privacy notice for requests and complaints.
Changes to this policy
We update this policy when the relevant storage or processing changes. The effective date identifies the current version. Where a change requires fresh permission, we ask before enabling the affected optional processing.