Cookie Policy

Last Updated: July 26, 2026

This Cookie Policy explains how Apilium Technologies OÜ ("Apilium", "we", "us", or "our") uses cookies and similar technologies on our website (apilium.com), customer portal (my.apilium.com), and within Apilium applications (Altretta, AIngle, and Mayros). By using our Services, you consent to the use of cookies as described in this policy.

1. What Are Cookies

Cookies are small text files stored on your device (computer, tablet, or mobile phone) when you visit a website or use an application. They help remember information about your visit, such as your preferences and login status, making your experience more convenient and personalized.

2. Types of Cookies We Use

Strictly Necessary Cookies

These cookies are essential for our services to function properly. Without them, you would not be able to use our services. They include:

  • This website: your language choice (the "locale" cookie), written only when you actively select a language
  • Customer portal (my.apilium.com): authentication tokens and session management
  • Customer portal (my.apilium.com): security tokens (CSRF protection, login verification)
  • Your cookie decision, kept in your browser’s local storage rather than a cookie, so it never travels with a request

These cookies cannot be disabled. They do not store personally identifiable information and are necessary for the service to operate.

Functional Cookies

These cookies enable enhanced functionality and personalization. Disabling them may affect certain features:

  • Remembering your language and region preferences
  • Storing your theme preference (dark/light mode)
  • Keeping you signed in across sessions (remember session)
  • Application settings synchronisation preferences

Analytics Cookies

These cookies help us understand how visitors use our website and services, allowing us to improve user experience:

  • Pages visited and navigation paths
  • Features used and time spent on each page
  • Error messages and crash reports
  • Referral sources and user demographics (aggregated)

The only analytics tool on this website is Google Analytics. It is not loaded until you accept analytics cookies, IP addresses are anonymised, and you can withdraw your consent at any time from the cookie preferences link in the footer.

Marketing Cookies

We currently use no marketing cookies. The category exists in our preference centre so that if we ever add one it cannot load without your consent. Were we to use them, they would cover:

  • Conversion tracking for advertising campaigns
  • Referral attribution to partner links
  • Social media share button functionality

We do not use invasive ad tracking. We do not sell your data to advertisers.

3. Cookies in Apilium Applications

Apilium applications (Altretta, AIngle, and Mayros) use local storage and cookies for the following purposes:

  • Storing your authentication token for API access
  • Caching your preferences and settings locally
  • Maintaining session state for collaborative features
  • Storing theme and editor preferences

Apilium applications collect no usage analytics. They contain no telemetry, error-reporting or session-recording code, so there is nothing to switch off, and they set no analytics or advertising cookies.

4. Similar Technologies

In addition to cookies, we may use the following technologies:

We do not use device fingerprinting or invasive tracking technologies.

Local Storage

Browser storage for user preferences that persist across sessions (e.g. theme settings)

Session Storage

Temporary storage that is cleared when you close your browser (e.g. form drafts)

IndexedDB

Browser database for offline functionality and in-app caching

Tracking Pixels

Small images used for email open rates and basic analytics (can be disabled)

5. Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We only use reputable third parties with strong privacy practices:

Third-party cookies are governed by those parties' privacy policies. We encourage you to review them.

Stripe

Secure payment processing and fraud prevention

Cloudflare

Security, DDoS protection, and performance optimization

GitHub/Google/Microsoft

OAuth authentication when you choose to sign in with these providers

Google Analytics

Website audience measurement: which pages are viewed and how visitors arrive. Loaded only after you accept analytics cookies; IP addresses are anonymised and the analytics cookie expires after 13 months.

6. Managing Your Cookie Preferences

Cookie Consent Banner

When you first visit our website, you'll see a cookie consent banner allowing you to accept or customize your cookie preferences. You can change these preferences at any time through the cookie settings link in our footer.

Browser Controls

Most browsers allow you to control cookies through their settings:

  • Block all cookies or only third-party cookies
  • Delete cookies when you close your browser
  • View and delete individual cookies
  • Enable "Do Not Track" or Global Privacy Control signals (we honour both as a refusal)

Blocking essential cookies will prevent you from using our services.

Opt-Out Options

You can opt out of non-essential tracking:

  • Use our cookie preference centre (link in the footer)
  • Enable Do Not Track or Global Privacy Control in your browser
  • Use browser extensions such as uBlock Origin or Privacy Badger

7. Cookie Duration

We regularly review cookie retention periods to ensure they comply with regulations and best practices.

Session Cookies: Automatically deleted when you close your browser

Persistent Cookies: Remain on your device until they expire or you delete them

Our Cookie Retention Periods

  • Authentication cookies: 30 days (or until logout)
  • Preference cookies: 1 year
  • Analytics cookies: 13 months maximum
  • Marketing cookies: 30 days

8. Legal Basis (GDPR)

Under the GDPR and ePrivacy Directive, our legal bases for using cookies are:

  • Strictly Necessary Cookies: Legitimate interest (necessary for service operation)
  • Functional Cookies: exempt from consent on this website. The only functional storage here is the language you choose, written at the moment you choose it, which falls under the ePrivacy exemption for storage strictly necessary to provide something you explicitly asked for. A toggle for it would do nothing but discard your own language choice. The customer portal uses functional storage to keep you signed in to a session you started.
  • Analytics Cookies: Consent (opt-in with easy opt-out)
  • Marketing Cookies: Consent (explicit opt-in required)

9. Updates to This Policy

We may update this Cookie Policy to reflect changes in technology, legislation, or our practices. Material changes will be communicated through a banner on our website. The 'Last Updated' date indicates when the policy was last revised.

10. Contact Information

For questions about our use of cookies or to exercise your rights:

Company: Apilium Technologies OÜ

Address: Tallinn, Estonia

Privacy inquiries: [email protected]

Data Protection Officer: [email protected]