Legal · GDPR & ePrivacy

Cookie Policy

Full transparency on the cookies and tracking technologies used by the Aegis platform. Document compliant with the GDPR (Regulation (EU) 2016/679) and the ePrivacy Directive.

Last updated: June 4, 2026 GDPR-compliant

1. Introduction

What cookies are

Cookies are small text files that the websites you visit save on your device (computer, tablet, smartphone) to store session information, preferences or statistical data. Similar technologies include local storage, session storage, pixels and web beacons.

Cookies allow the platform to function correctly (for example by keeping you signed in) and, where you allow it, to collect aggregated data to improve the service.

Who we are

The Data Controller is AEGIS SOFTWARE SOLUTIONS LTD, with registered office at 20 Wenlock Road, London N1 7GU, England. For full details on the processing of personal data, see our Privacy Policy.

In short: we only use cookies strictly necessary for the platform to function and for security. We don't use profiling cookies and we don't share data with advertisers.

2. Types of cookies used

Below is the complete list of cookies installed by the platform, in compliance with the principle of transparency (Art. 13 GDPR):

NameProviderDurationTypePurposeLegal basis
sb-access-tokenAegis (Supabase)1 hourTechnicalUser session authentication token.Art. 6(1)(b) GDPR — Performance of contract
sb-refresh-tokenAegis (Supabase)30 daysTechnicalAutomatic renewal of the authentication session.Art. 6(1)(b) GDPR — Performance of contract
aegis-themeAegis1 yearPreferenceStores the selected theme (light/dark).Art. 6(1)(f) GDPR — Legitimate interest
aegis-cookie-consentAegis6 monthsTechnicalStores choices expressed in the cookie banner.Art. 6(1)(c) GDPR — Legal obligation
aegis-localeAegis1 yearPreferenceStores the user's language preference.Art. 6(1)(f) GDPR — Legitimate interest
__cf_bmCloudflare30 minutesTechnicalBot mitigation and automated-attack defence.Art. 6(1)(f) GDPR — Legitimate interest (security)
cf_clearanceCloudflare30 daysTechnicalAnti-bot verification after challenge.Art. 6(1)(f) GDPR — Legitimate interest (security)
__stripe_mid / __stripe_sidStripe1 year / 30 minTechnicalPayment fraud prevention.Art. 6(1)(f) GDPR — Legitimate interest (anti-fraud)

Cookies are classified as first-party when installed directly by Aegis, and third-party when installed by external providers (Cloudflare, Stripe) through resources on the platform.

3. Technical and functional cookies

Technical cookies are essential for the platform to work correctly and to deliver the service you requested. By their nature they do not require prior consent (recital 30 of the ePrivacy Directive).

  • Session cookies — keep you logged in during navigation (e.g. sb-access-token, sb-refresh-token).
  • Security cookies — anti-CSRF protection, bot mitigation and DDoS defence (Cloudflare).
  • Preference cookies — store choices such as language, light/dark theme, layout.
  • Consent cookies — store your cookie choice so we don't ask on every visit.
  • Payment anti-fraud cookies — Stripe uses technical cookies to prevent fraudulent transactions.
Disabling these cookies may make the service unusable or break access to your account.

4. Analytics cookies

Aegis currently does not use third-party analytics cookies (Google Analytics, Matomo, Hotjar, etc.) on the website or the application.

Usage statistics are collected exclusively on the server side, in aggregated and anonymous form, without individual user profiling. Such data does not allow re-identification and is used solely for technical optimisation and capacity planning.

Should analytics tools that drop cookies be introduced in the future, this Cookie Policy will be updated and we will ask for explicit consent via the banner.

5. Marketing and profiling cookies

Aegis does not use marketing or profiling cookies.

We do not install advertising pixels (Facebook Pixel, Google Ads, LinkedIn Insight Tag, TikTok Pixel, etc.) and we do not share behavioural data with ad networks. We do not build individual profiles for commercial purposes.

Any promotional communications (newsletters, product news) are sent exclusively via email, only with explicit consent collected separately, and you can revoke consent with a single click at the bottom of every message.

6. Third-party cookies

Some essential services integrated into the platform install third-party technical cookies. Each provider has its own privacy notice, which we invite you to consult:

Cloudflare

CDN, DDoS mitigation, perimeter security.

Privacy policy ↗

Stripe

Payment processing, fraud prevention.

Privacy policy ↗

Supabase

Authentication and database (session cookies).

Privacy policy ↗

Aegis carefully selects its providers, preferring those with EU-based infrastructure or otherwise GDPR-compliant providers with adequate safeguards for international transfers (SCCs, EU-US Data Privacy Framework).

7. Managing cookies

Through the platform

On your first visit you'll see a cookie banner letting you accept, reject or customise your choices. You can change your preferences at any time from the dedicated section.

Choices are stored for 6 months; after that period, or in case of material changes to this policy, consent will be requested again.

From your browser

You can manage or block cookies directly in your browser settings. Official guides:

What happens if you block cookies

  • Blocking technical cookies may impair or prevent access to the platform.
  • Blocking preference cookies means you'll lose customised settings (theme, language) on every visit.

8. Updates to this Cookie Policy

We update this Cookie Policy whenever we introduce new cookies, change provider or whenever regulation requires it. The last-updated date is always shown at the top of the document.

In case of material changes affecting previously given consent, you'll be asked again for an active choice via the banner.

9. Contact

Data Controller

AEGIS SOFTWARE SOLUTIONS LTD

20 Wenlock Road, London N1 7GU, England, United Kingdom
Company No. 16640141

Email for privacy and cookie requests

info@aegissystem.net

For any matter related to the processing of your personal data see also our Privacy Policy. You may also lodge a complaint with your competent supervisory authority.