Cookie Policy
Last updated: 2026-11-01
What cookies and similar technologies are
Cookies are small text files that a website places on your device (computer, tablet or phone) when you visit it. They are stored by your browser and can be read back when you return, allowing the site to recognise your device, remember your choices and keep certain features working.
"Similar technologies" include things such as local storage, session storage and pixels. They serve comparable purposes — storing or reading information on your device. In this policy, when we say "cookies" we mean cookies and these similar technologies together.
Cookies can be "first-party" (set by Apolaris AI on apolaris.net and its subdomains) or "third-party" (set by another provider whose resources we load). They can also be "session" cookies, which are deleted when you close your browser, or "persistent" cookies, which remain for a set period or until you delete them.
How and why Apolaris AI uses cookies
Apolaris AI operates a public marketing website at apolaris.net and a multi-tenant SaaS platform for service and retail businesses, reachable at app.apolaris.net (the application), portal.apolaris.net (the staff portal), docs.apolaris.net (documentation) and support.apolaris.net (support).
We use cookies for a small number of clearly defined purposes:
- to keep you securely signed in and protect your session;
- to defend forms and requests against cross-site request forgery and other abuse;
- to remember your preferences, such as your chosen interface language;
- to record the cookie choices you make so we do not ask you again on every visit;
- where enabled, to understand in aggregate how our sites are used so we can improve them.
We deliberately keep our use of cookies minimal. Our sign-in is hardened using offline techniques — an arithmetic challenge, a hidden honeypot field and failed-attempt throttling — so we do not rely on any third-party CAPTCHA, advertising network or external tracking service to protect access.
The categories of cookies we use, and the legal basis for each
We group cookies into four categories. The category determines the legal basis on which we may set the cookie.
- Strictly necessary. These cookies are essential for the site to function and to keep it secure — for example, keeping you signed in and protecting against cross-site request forgery. They are also what stores your cookie choices. Under the EU ePrivacy rules and Mexico's data protection framework, strictly necessary cookies are exempt from consent because the service you have requested cannot be delivered without them. They cannot be switched off through our cookie settings panel.
- Preferences. These cookies remember choices you make, such as your preferred language, to give you a more consistent experience. They are non-essential, so where required we set them on the basis of your consent.
- Analytics. Where enabled, these cookies help us understand, in aggregate, how visitors use our sites so we can improve them. They are non-essential and are only set on the basis of your consent. We do not currently use analytics cookies to build advertising profiles, and we will only place analytics cookies after you have agreed.
- Advertising. Only with your consent, these cookies and pixels let us measure which ads bring us customers. They are off by default.
For non-essential cookies, our legal basis is your consent under the EU GDPR and ePrivacy Directive and under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, 2026). You can give or withhold that consent freely, and you can withdraw it at any time without affecting your ability to use the parts of the service that depend only on strictly necessary cookies.
The cookies we actually set
The table below lists the cookies Apolaris AI sets across apolaris.net and its subdomains. Durations are maximums; cookies may be cleared earlier, for example when you sign out or clear your browser.
| Cookie | Purpose | Category | Duration |
|---|---|---|---|
| sessionid | Keeps you signed in to your account during a session | Strictly necessary | Session, up to 8 hours |
| csrftoken | Protects forms and requests against cross-site request forgery (CSRF) | Strictly necessary | 1 year |
| django_language | Remembers your chosen interface language (English, Spanish or French) | Preferences | 1 year |
| apolaris_cookie_consent | Stores the cookie choices you have made so we can honour them | Strictly necessary | 6 months |
| ldg_lang | Remembers a language you chose on the marketing site that the platform interface does not yet offer, so the site stays in that language | Preferences | 1 year |
| ptwebchat | Set only on public websites built with our website builder: keeps the anonymous web-chat conversation you start with the business linked to your browser | Strictly necessary | 8 hours |
Other data collection
This Cookie Policy covers only browser cookies and similar technologies on our websites. The platform also processes personal data through non-cookie channels — including WhatsApp messaging, optional SMS sent through our SMS carrier, OVHcloud, AI features, and optional security-camera event detection. For the full picture of how personal data is processed across these channels, please see our Privacy Policy and, for our business customers, the Data Processing Agreement (DPA).
Advertising cookies, only with your consent
On Apolaris AI's public signup and purchase pages, and only if you accept the “Advertising” category, we load the measurement tags of Google Ads, Meta and OpenAI (ChatGPT Ads). They tell us which ads lead to a signup or a purchase. Those providers may set their own cookies (for example _gcl_*, _fbp and _fbc) and process that data under their own policies. With your consent we also report the signup or purchase to them from our servers, with your email irreversibly hashed and your browser's technical details (IP address and user agent). You can change your mind at any time under “Cookie settings”. Without it, none of these tags load and nothing is reported. We do not use these technologies inside the platform on your business's customers' data, and we do not sell personal data.
Cookies set by embedded third-party resources
Some pages load technical resources served through third parties — for example web fonts or content delivered via our network and content delivery provider, Cloudflare, which we use for performance, security and our secure tunnel. These providers may set strictly technical cookies that are necessary to deliver the resource, such as load-balancing or security cookies. They are not used by Apolaris AI for advertising or cross-site tracking. Where such a provider sets a cookie, its own handling of that data is governed by that provider's terms and privacy notice.
How to manage or withdraw your consent
You are in control of non-essential cookies. You can change or withdraw your choices at any time using either of the following:
- The "Cookie settings" panel. A link to "Cookie settings" is available in the footer of our sites. Opening it lets you review the categories, turn Preferences and Analytics cookies on or off, and save your decision. Strictly necessary cookies are always on because the service cannot work without them.
- Your browser controls. Most browsers let you view, block or delete cookies and warn you before new ones are set. The exact steps depend on your browser; check its help pages for "cookies" or "privacy". Please note that blocking strictly necessary cookies may stop parts of the platform — including signing in — from working.
Withdrawing consent is as easy as giving it, and it does not affect the lawfulness of any processing carried out before you withdrew.
How long your consent lasts and when we ask again
When you make a choice in our cookie settings panel, we record it in the apolaris_cookie_consent cookie, which lasts up to 6 months. After that period, or if you clear the cookie, delete it through your browser, or use a different browser or device, we will ask you to make your choice again. We will also ask again if we introduce a new category or purpose of non-essential cookie that your earlier choice did not cover.
Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in the technologies we use, in our services, or in applicable law. When we make a material change, we will update the effective date shown at the top of this page and, where appropriate, ask for your consent again. We encourage you to review this policy periodically.
Your rights and how to contact us
Apolaris AI is provided by Apolaris AI S.L., a company established in Spain, and this policy is governed by the laws of Spain, without prejudice to the mandatory protections that apply to you under the law of your place of residence. The Services are offered from Spain to customers in the European Union, Mexico and other markets. For the marketing website, sales leads and customer-account data, Apolaris AI acts as data controller; for the personal data our business customers manage inside the platform, the customer is the data controller and Apolaris AI acts as a data processor on the customer's documented instructions under the Data Processing Agreement (DPA).
Depending on where you are, you have rights over your personal data. In Mexico, these include your ARCO rights — Acceso (access), Rectificación (rectification), Cancelación (cancellation) and Oposición (objection) — and you may contact the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) if you have concerns. If you are in the EU or EEA, you keep your rights under the GDPR, including the right to lodge a complaint with your local data protection supervisory authority or, as Apolaris AI is established in Spain, with the Spanish Agencia Española de Protección de Datos (AEPD).
If you have questions about this Cookie Policy, want to exercise your rights, or wish to change your cookie choices and need help doing so, contact us at [email protected].
The registered entity responsible for Apolaris AI is: APOLARIS AI S.L., Tax ID (NIF) B05659628, C/Ana Maria 33, 33209 Gijon, Asturias, Spain.