1. What cookies are
Cookies are small values stored by a website in a browser. Similar technologies can preserve a session or remember a security state. This Notice uses cookies as a short name for those browser mechanisms.
A cookie may be first-party or set by a service embedded in a page. Its purpose, duration, scope, and security attributes depend on the surface and the current implementation.
- Necessary cookies support a requested function such as authentication or session continuity.
- Non-essential cookies are not required to deliver the requested page or service function.
2. Current public-site use
The public landing may show a cookie banner with Cookie notice, Decline, and Accept analytics. Cookie notice opens this Notice at /cookies. Accept analytics enables a first-party PostHog browser analytics script that measures product traffic and interactions through a first-party /ingest proxy. When a visitor declines or has not made a choice, the script remains initialized in an opted-out state and does not capture analytics events. No advertising cookies or advertising tags are used.
The public site may link to an authenticated application, an agent authorization flow, or an external website. Those surfaces can have different browser storage and their own notices.
- No advertising cookies are currently used on the public site.
- The PostHog browser analytics script captures events only after Accept analytics.
- Declining keeps the analytics script opted out and transmits no analytics events.
- Server-side service measurements are not browser cookies and are described in the Privacy Policy.
3. Necessary session and authentication cookies
Authenticated Siglata surfaces may use necessary session and authentication cookies to recognize a signed-in browser, maintain an authorization flow, protect a session, and route a request to the selected account or Organization. Without those cookies, sign-in and authenticated features may not work.
The exact cookie name, expiry, domain, and browser behavior can change with the authentication implementation and the surface being used. We do not describe a fixed retention period here because session state and security needs can differ.
- Necessary cookies are used for the function requested by the user rather than for advertising.
- Deleting or blocking them can sign a user out or prevent an agent authorization or application request from completing.
4. External links and connected services
Links from Siglata to an agent host, identity provider, documentation site, payment surface, or other external service may cause that service to set its own cookies or similar technologies. Estirpia does not control those mechanisms, and their providers' notices and choices apply.
A Customer's connected agent or host may also use browser storage outside Siglata. Review that provider's terms and privacy information before connecting it to an Organization.
- A third-party cookie is not evidence that Siglata uses advertising cookies on the public site.
- Use browser controls and the external provider's settings for technologies that Siglata does not control.
5. Future non-essential technologies and consent
If Siglata introduces non-essential advertising, personalization, or similar browser technologies beyond the consent-gated PostHog product-traffic script already described, we will update this Notice with their purposes, categories, providers or provider categories, data, retention, and available controls. Where consent or another choice is required, we will request it before setting the technology.
A user will be able to withdraw or change a consent choice through the control offered for the relevant surface, subject to the continued use of necessary session and authentication cookies. Withdrawal does not change processing that already occurred lawfully before withdrawal.
- Non-essential cookies will not be treated as necessary merely because they are convenient.
- The Privacy Policy explains related personal-data processing and request rights.
6. Browser controls and contact
Most browsers allow people to block, delete, or limit cookies. Browser controls can affect sign-in, authorization, language, and other necessary functions, and they may not provide the same granularity as a surface-specific consent control.
For questions about this Notice or a cookie-related request, contact support@mail.siglata.com.
- Do not send session values or authentication tokens in a support request.
- Security concerns about cookie exposure or session misuse should be sent to security@mail.siglata.com.
7. Changes
This Notice is effective on September 3, 2026. We may update it when browser technologies, providers, purposes, or legal requirements change. The revised Notice will show a new effective date and will apply prospectively.
The current implementation and any applicable consent interface control over what is actually set on a particular surface.
- A future non-essential technology will not be described as present before it is deployed.
- Necessary authentication and session behavior can change as the Service and its security controls evolve.