Overview
This Cookie Notice explains the cookies and browser storage used on the Qaltron CaaP™ platform at caap.qaltron.com and any Qaltron-owned page that expressly links to this notice for CaaP-related use (operated by Qaltron Inc.), why we use them, and how you can change your choice at any time. It supplements our Privacy Policy. The categories below were verified against the live platform, not written from a generic template.
We separate cookies and storage into two categories: strictly necessary, which we do not ask permission for because the site cannot function securely without them, and optional analytics, which only run after you choose “Accept analytics” in the cookie banner or the control in the site footer.
Strictly necessary cookies and storage
These technologies keep the platform secure and let you log in and stay logged in. They are necessary to provide the service or security functionality you request, and therefore do not require optional-cookie consent where the applicable storage/access exception applies; see our Privacy Policy for the separate legal-basis explanation of how we use this data.
- Session/security cookie — holds a security token (including the CSRF token that protects forms from cross-site attacks) and short-lived status messages. HttpOnly, Secure, SameSite=Lax.
- Access credential cookie — a short-lived credential (about 30 minutes) proving you are logged in. HttpOnly, Secure, SameSite=Lax; JavaScript cannot read it.
- Refresh credential cookie — a longer-lived credential (about 7 days) used to renew your session without re-entering your password. HttpOnly, Secure, SameSite=Lax; JavaScript cannot read it.
- Cookie consent preference — a small browser storage entry that remembers your analytics choice (accepted or rejected) so we do not ask again. Contains no identifying information.
Optional analytics cookies and storage
On public marketing and content pages only (never on login, registration, your dashboard, or any assessment, results, provenance, or admin page), we use an analytics service provider once you accept, to understand aggregate visitor behavior such as page views, visits to specific solution pages, engagement with our product demo, and clicks on key calls to action.
- we do not build an identified profile of you, and detailed recording of individual visits is not enabled by default;
- a coarse, non-precise geography (country, state/region, city) and a timezone value may be included — geography resolved by our analytics provider from your connection, timezone reported directly by your browser — but we never send your raw IP address, exact coordinates, postal code, or a street-level address;
- you are identified only by a randomly generated, pseudonymous identifier issued by the provider — never your name, email, or account ID;
- anything that looks like an email address, web address, password, or other credential is never transmitted as part of these events.
We also use a small outreach-attribution value in your browser (see inventory below) to remember which marketing link or campaign brought you to the site, so that information can be attached to the analytics events above. This is also optional and only stored after you accept.
Cookie & storage categories in use
The categories below were verified directly against the running platform, not assumed from vendor documentation.
| Technology | Type | Set by | Category | Purpose | Duration |
|---|---|---|---|---|---|
| Session/security storage | Cookie (HttpOnly) | Qaltron | Strictly necessary | CSRF protection, short-lived status messages | Browser session |
| Access credential storage | Cookie (HttpOnly) | Qaltron | Strictly necessary | Signed-in session credential | ~30 minutes |
| Refresh credential storage | Cookie (HttpOnly) | Qaltron | Strictly necessary | Renews your signed-in session | ~7 days |
| Consent preference storage | localStorage | Qaltron | Strictly necessary | Remembers your cookie choice | ~180 days, then re-asked |
| Analytics identifier storage | Cookie + localStorage | Analytics service provider | Optional analytics | Pseudonymous analytics identifier | Provider platform default, renewed on visits |
| Analytics session storage | sessionStorage | Analytics service provider | Optional analytics | Session measurement and analytics bookkeeping | Browser tab session |
| Campaign attribution storage | sessionStorage | Qaltron | Optional analytics | Remembers the marketing campaign/link that brought you here | Browser tab session |
Actual browser storage names may include Qaltron technical identifiers or provider-generated prefixes. None of the optional-analytics entries are created until you choose “Accept analytics.”
Error and security monitoring (no browser cookies)
We use security, reliability, and error-monitoring services to detect and diagnose technical problems and security issues. These run on our servers, not in your browser, and do not set any cookie or browser storage on this site. We apply controls intended to limit the diagnostic information these services receive to the technical information necessary to detect, investigate, and resolve errors and security issues, and to prevent assessment content, credentials, or sensitive business inputs from being intentionally included.
Third-party content on our pages
Some pages load resources from other providers. We do not control these providers' own cookies or storage.
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) — used to load our typefaces. - YouTube — our homepage demo video uses YouTube's privacy-enhanced embedding mode. YouTube may process information when embedded content is loaded or played under its own privacy practices.
- Outbound links to LinkedIn, Crunchbase, YouTube, X/Twitter, WhatsApp, and Facebook, and a Google Forms link for booking a demo — these only load their own content or set their own cookies if you click through to them; we do not control their privacy practices.
Your choices
You can accept or reject optional analytics at any time using the cookie banner shown on your first visit, or the Cookie Preferences control in the footer of every page. Rejecting (or later withdrawing a prior acceptance) stops our analytics service provider's script from loading or continuing to run, and stops the outreach-attribution value from being stored; it does not affect strictly necessary cookies needed to keep you securely signed in. You can also control cookies through your browser settings, and this site honors the Global Privacy Control signal where your browser sends one.
Contact
Questions about this Cookie Notice can be sent to info@qaltron.com. See our Privacy Policy for how to exercise your broader data-protection rights.