Cookie Policy

Cookie Policy

Effective Date: April 22, 2026

This Cookie Policy explains how AuraGuardian ("we", "us", "our") uses cookies and similar technologies when you interact with our platform or visit a website protected by AuraGuardian's security agent.

1. What Are Cookies

Cookies are small text files stored on your device by your web browser. They allow websites to remember information about your visit, such as authentication state or preferences.

2. Cookies We Set Cookie NamePurposeDurationType aura_passport Stores a cryptographic hash confirming the visitor passed a security challenge. Contains no personal data — only a hash derived from the license key and request fingerprint. 24 hours First-party, Strictly Necessary XSRF-TOKEN Cross-Site Request Forgery protection for platform dashboard forms (Laravel framework default). Session First-party, Strictly Necessary AuraGuardian_session Maintains authenticated session state on the AuraGuardian dashboard. Contains no personal data — only an encrypted session identifier. Session (2 hours of inactivity) First-party, Strictly Necessary

3. Cookies on Protected Websites

When the AuraGuardian agent is deployed on a customer's website, it sets the aura_passport cookie on the visitor's browser after they pass a security challenge. This cookie:

• Contains no personally identifiable information.
• Is a first-party cookie set by the protected website's domain (not by AuraGuardian).
• Is classified as strictly necessary for the security function and does not require consent under GDPR/ePrivacy regulations.
• Expires after 24 hours. Clearing it will require the visitor to pass the challenge again.

4. Third-Party Cookies

The AuraGuardian platform does not embed any third-party tracking pixels, analytics, or advertising cookies. Our third-party service providers may set their own cookies:

• Stripe — Payment processing. Stripe may set cookies for fraud detection during checkout. See Stripe's Cookie Policy.

5. Cookie Consent

All cookies set by AuraGuardian are classified as strictly necessary for security and authentication purposes. Under GDPR Article 5(3) and the ePrivacy Directive (Directive 2002/58/EC, as amended by 2009/136/EC), strictly necessary cookies are exempt from the consent requirement.

We do not use cookies for advertising, analytics, or behavioral tracking.

6. How to Manage Cookies

You can configure your browser to block or delete cookies. Note that blocking security cookies (aura_passport) may cause repeated security challenges when visiting protected websites.

Common browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions

7. Changes to This Policy

We may update this Cookie Policy to reflect changes in our practices or applicable regulations. Material changes will be communicated via our platform at least 14 days before they take effect.

8. Contact

For questions about this Cookie Policy, contact us at the address listed on our Contact page.