Cookie Policy
Last Updated: January 3, 2026 Version: 1.0.0 Effective Date: January 3, 2026
1. Introduction
This Cookie Policy explains how YAPL Project Management Ltd. ("YAPL", "we", "our", or "us") uses cookies and similar technologies when you visit our website and use our project management platform ("Service").
This policy should be read together with our Privacy Policy and Terms of Service.
2. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.
Types of Cookies
- Session Cookies: Temporary cookies that expire when you close your browser
- Persistent Cookies: Cookies that remain on your device for a set period or until you delete them
- First-Party Cookies: Set by the website you are visiting
- Third-Party Cookies: Set by a domain other than the one you are visiting
3. How We Use Cookies
We use cookies for the following purposes:
3.1 Strictly Necessary Cookies
These cookies are essential for the operation of our Service. They enable core functionality such as:
- Authentication: Keeping you logged in during your session
- Security: Protecting against cross-site request forgery (CSRF) attacks
- Load Balancing: Distributing traffic across our servers
- Session Management: Remembering your preferences within a session
Legal Basis: Legitimate interest (essential for service delivery) These cookies cannot be disabled.
3.2 Analytics Cookies
With your consent, we use analytics cookies to understand how visitors interact with our Service:
| Cookie Provider | Purpose | Data Collected | Retention |
|---|---|---|---|
| Google Analytics (GA4) | Website analytics | Page views, session duration, device info | 26 months |
Data Collected by Analytics:
- Pages visited and time spent
- Referral sources (how you found us)
- Device and browser information
- General location (country/city level)
- User journey and navigation patterns
What We DON'T Collect:
- Personal identifying information
- Precise geolocation
- Keystrokes or form inputs
3.3 Marketing Cookies
With your consent, we use marketing cookies to deliver relevant advertisements and measure campaign effectiveness:
| Cookie Provider | Purpose | Retention |
|---|---|---|
| Meta Pixel | Facebook/Instagram advertising | 90 days |
| LinkedIn Insight Tag | LinkedIn advertising | 90 days |
Purpose of Marketing Cookies:
- Show relevant ads on social media platforms
- Measure ad conversion and ROI
- Create custom audiences for retargeting
- Understand which campaigns drive signups
4. Managing Your Cookie Preferences
4.1 Cookie Consent Banner
When you first visit our website, you will see a cookie consent banner that allows you to:
- Accept All: Enable all cookie categories
- Reject Non-Essential: Only allow strictly necessary cookies
- Customize: Choose which categories to enable via the Cookie Settings
4.2 Changing Your Preferences
You can change your cookie preferences at any time by:
- Clicking "Cookie Settings" in the footer of any page
- Adjusting the toggles for each cookie category
- Saving your preferences
Your choice will take effect immediately for new tracking, but previously collected data cannot be retroactively deleted from third-party analytics platforms.
4.3 Browser Settings
You can also control cookies through your browser settings:
| Browser | Instructions Link |
|---|---|
| Chrome | chrome://settings/cookies |
| Firefox | about:preferences#privacy |
| Safari | Preferences > Privacy |
| Edge | edge://settings/privacy |
Note: Blocking all cookies may affect the functionality of our Service.
5. Google Consent Mode v2
We use Google Consent Mode v2 to respect your cookie preferences:
- Before Consent: No analytics data is collected, and Google services use privacy-preserving measurement
- After Consent Granted: Full analytics functionality is enabled
- After Consent Denied: Anonymous aggregated data may be used for conversion modeling
This ensures compliance with EU Digital Markets Act (DMA) requirements while maintaining measurement accuracy.
6. Third-Party Cookies
Our Service may contain links to third-party websites or embedded content (e.g., videos, social media buttons). These third parties may set their own cookies. We do not control these cookies, and they are subject to the third party's privacy policy.
7. Cookie Retention
| Cookie Type | Retention Period |
|---|---|
| Session Cookies | Deleted when browser closes |
| Authentication | 7 days (or until logout) |
| Consent Preferences | 1 year |
| Google Analytics | 26 months |
| Marketing Cookies | 90 days |
8. International Data Transfers
Some of our cookie providers (Google, Meta, LinkedIn) are based in the United States. Data transferred to these providers is protected by:
- Standard Contractual Clauses (SCCs)
- Privacy Shield certifications (where applicable)
- EU-US Data Privacy Framework
9. Your Rights Under GDPR
As a data subject, you have the right to:
- Access: Know which cookies we use and what data is collected
- Withdraw Consent: Change your cookie preferences at any time
- Deletion: Request deletion of any personal data we hold
- Portability: Receive your data in a machine-readable format
To exercise these rights, contact us at privacy@yapl.com.
10. Updates to This Policy
We may update this Cookie Policy from time to time. When we make significant changes:
- We will update the "Last Updated" date at the top
- We will increment the version number
- You may be asked to re-consent if cookie categories change
11. Contact Us
If you have questions about our use of cookies:
Email: privacy@yapl.com Data Protection Officer: dpo@yapl.com Address: [Company Address - To Be Updated]
12. Specific Cookie Details
12.1 First-Party Cookies
| Cookie Name | Purpose | Expiry |
|---|---|---|
sb-* | Supabase authentication | Session |
yapl-consent | Cookie consent preferences | 1 year |
yapl-theme | Theme preference (dark/light) | 1 year |
yapl-locale | Language preference | 1 year |
12.2 Third-Party Cookies
| Cookie Name | Provider | Purpose |
|---|---|---|
_ga, _ga_* | Analytics tracking | |
_fbp | Meta | Facebook Pixel |
li_sugr, bcookie | LinkedIn tracking |