Cookie Policy
Last updated: March 1, 2026
Manage your cookie preferences
You can change your cookie settings at any time using the button below.
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help us provide a better experience by remembering your preferences and understanding how you use our platform. This policy explains what cookies we use, why we use them, and how you can control them in accordance with your rights under applicable privacy laws.
Legal Basis for Cookies
Our use of cookies complies with the following international privacy regulations:
GDPR (EU/EEA)
General Data Protection Regulation — requires freely given, specific, informed opt-in consent for non-essential cookies under Article 6(1)(a) and ePrivacy Directive Article 5(3). Consent must be as easy to withdraw as to give.
UK GDPR & PECR
UK General Data Protection Regulation and the Privacy and Electronic Communications Regulations — mirror the EU opt-in standard for cookies after Brexit.
CCPA / CPRA (California)
California Consumer Privacy Act, as amended by the CPRA — grants the right to opt out of the “sale” or “sharing” of personal information (including via cookies) and to limit use of sensitive data. We honor Global Privacy Control (GPC) signals.
US state laws (VA, CO, CT, UT, TX…)
Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA and other state privacy laws — provide rights to opt out of targeted advertising and the sale of personal data, including via universal opt-out signals.
LGPD (Brazil)
Lei Geral de Proteção de Dados — requires a lawful basis (usually consent) for processing personal data, including cookies, and grants data-subject rights.
PIPEDA (Canada)
Personal Information Protection and Electronic Documents Act — requires meaningful, informed consent appropriate to the sensitivity of the data for cookie use.
FADP/DSG (Switzerland)
Revised Swiss Federal Act on Data Protection — requires transparent information about data processing and appropriate safeguards for international transfers.
POPIA (South Africa)
Protection of Personal Information Act — requires a lawful basis and transparency for processing personal information collected via cookies.
Privacy Act (Australia)
Privacy Act 1988 and the Australian Privacy Principles — govern openness, collection and access rights for personal information handled through cookies.
PDPA (Singapore)
Personal Data Protection Act — requires consent before collecting, using, or disclosing personal data, and honoring withdrawal of consent.
Cookies We Use
Essential Cookies
Always ActiveRequired for basic functionality: authentication, session management, CSRF protection, and security. These cookies cannot be disabled as they are necessary for the website to function.
Legal basis: Legitimate interest under GDPR Art. 6(1)(f); exempt from consent under ePrivacy Directive Art. 5(3).
Analytics Cookies
Requires ConsentHelp us understand how visitors interact with our platform using aggregated, anonymized data. We use privacy-respecting analytics tools.
Legal basis: Consent under GDPR Art. 6(1)(a). Set only after you grant explicit consent.
Functional Cookies
Requires ConsentRemember your preferences such as theme selection, language, and dashboard layout. Enhance your experience but are not essential.
Legal basis: Consent under GDPR Art. 6(1)(a).
Marketing Cookies
Requires ConsentUsed to deliver relevant advertisements and track campaign effectiveness. Only set if you consent. You can opt out at any time.
Legal basis: Explicit consent under GDPR Art. 6(1)(a), CCPA §1798.120, LGPD Art. 7(I).
Managing Cookies
You have multiple ways to control cookies:
- 1.Our Cookie Banner — Use the cookie consent banner or the "Manage Cookie Preferences" button above to update your choices at any time.
- 2.Browser Settings — Most browsers allow you to refuse, delete, or block cookies. See your browser's help documentation for instructions.
- 3.Opt-Out Tools — Visit aboutads.info or youronlinechoices.eu for industry-wide opt-out options.
- 4.Do Not Track — We honor Global Privacy Control (GPC) signals and Do Not Track headers where required by law.
Your Privacy Rights
Depending on your location, you may have the following rights under applicable data protection laws:
- •Right of access — Request what personal data we process about you
- •Right to rectification — Correct inaccurate personal data
- •Right to erasure — Request deletion of your personal data ("right to be forgotten")
- •Right to restrict processing — Limit how we use your data
- •Right to data portability — Receive your data in a structured, machine-readable format
- •Right to object — Object to processing based on legitimate interests
- •Right to withdraw consent — Withdraw consent at any time without affecting prior processing
- •Right to opt out of sale/sharing — Opt out of the sale or sharing of personal information (CCPA/CPRA)
- •Right to non-discrimination — Exercise your rights without receiving different service quality
Third-Party Cookies
Some cookies may be set by third-party services we use, such as Stripe for payment processing, Google Analytics for site analytics, and advertising platforms. These are governed by the respective third-party privacy policies. We ensure all third-party processors have appropriate data processing agreements (DPAs) in place.
International Data Transfers
Some of our third-party cookie providers may transfer data outside the EU/EEA or Switzerland. Where this occurs, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider is certified under an adequacy framework.
Children's Privacy
Our Service is not directed at children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly place cookies on the devices of children. If you believe cookies have been set for a child, please contact us immediately.
Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our practices. When we make material changes, we will notify you by updating the date at the top and, where appropriate, display a new consent banner so you can review and update your preferences.
Contact Us
If you have any questions about our use of cookies or other technologies, please contact us:
Email: support@zyphra.app
Address: Alex Kem, Am Hellweg 10, 32105 Bad Salzuflen, Germany
Response time: Within 30 days (45 days for CCPA requests)
EU residents may also lodge a complaint with their local supervisory authority.