Cookie and analytics policy

1. Why this document exists

This document describes cookies and similar tools on the Ednice public site and the two levels of first-party analytics. It complements the Privacy policy.

The controller of the site and its analytics is Ednice LLC, Office 2408, Mazaya Business Avenue BB2, Jumeirah Lakes Towers, Dubai, United Arab Emirates. Cookie and analytics questions: info@ednice.com. The site uses no third-party counters, advertising pixels or external network tags.

2. Two collection levels

Until you press “Accept” the basic level applies: the site sends a page view only. No device cookie is set, no technical fingerprint is computed, and visits are not linked to a person. “Essential only” keeps that mode.

At the basic level we store the page URL and referrer, device and browser type (User-Agent), approximate location from the IP address at country, region and city level, plus a truncated IP address (with the last part removed) and a daily technical key derived from those values. That key is never written to your browser, expires each day and cannot be used to recognize you on a later visit.

After “Accept” the service also sets the device cookie _ed, computes a derived hash of technical browser characteristics as a fallback for return visits, keeps the full IP address of the event and collects on-page behaviour: scroll depth, active reading time, clicks, form submissions, pointer movement and a click map. Page text, field values and a snapshot of the layout are not recorded. This lets us tell new visitors from returning ones and connect a visit to a sign-up or purchase you made.

3. Cookie and storage table

The site uses:

• _ed — device cookie for full analytics; set by the analytics service only after consent; HttpOnly; SameSite=Lax; up to 400 days;
• ed_consent — chosen consent level, text version and signature; readable by the browser; SameSite=Lax; up to 1 year;
• ed_locale — interface language; SameSite=Lax; up to 1 year;
• ednice-main-theme — theme in browser local storage; not sent to the server by itself;
• cabinet sign-in cookies — only for authentication and account security.

The technical browser fingerprint is neither a cookie nor a storage entry: it is computed when an event is sent and is not saved on your device.

4. How to change your choice

You can change the choice at any time in cookie settings in the site footer or on this page — refusing is as easy as accepting. Withdrawing full consent clears the _ed device cookie and deletes the fingerprint map. Anonymized basic-level page views may continue.

You can also block cookies in your browser. Some site and dashboard features will then be limited: signing in and remembering settings rely on cookies.

5. Retention

Analytics data is kept as follows:

• raw view events — 90 days, then deleted automatically;
• anonymized daily, session and source aggregates — indefinitely, without visitor identifiers;
• the record of your consent choice (level, text version, language, date) — 3 years as proof of the choice;
• the map between a technical fingerprint and a device — 30 days; cleared when consent is withdrawn;
• the _ed cookie — up to 400 days, the ed_consent cookie — up to 1 year; after it expires consent is requested again;
• pointer movement and click recordings — 30 days; aggregated click and scroll maps — 180 days.

6. Legal basis and free choice

The basic level is needed to run the site, protect it from automated requests and produce aggregate visit statistics — our legitimate interest. Full analytics runs only on your consent, given by pressing “Accept” and withdrawable at any time. Refusing full consent does not limit access to the site, its materials or the dashboards.

Analytics data is not sold, not shared with advertising networks and not used for third-party advertising. To delete the link between a device and your account, write to info@ednice.com.