1. What This Policy Covers
This Cookie Policy explains what www.elnora.ai, our marketing website, stores on your device and why. It sits alongside our Privacy Policy, which governs everything else we do with personal information.
Elnora AI, Inc. ("Elnora AI", "we", "us") is the controller of the information described in this Cookie Policy. Elnora AI OÜ is the controller for the personal data described in Section 8 of our Privacy Policy.
2. The Platform Sets Only Sign-In Cookies
platform.elnora.ai uses no analytics, advertising or tracking technologies. It sets no tracking cookies, no pixels and no web beacons, it does not fingerprint your device or track you across sites, and it is connected to no advertising platform.
It sets two cookies, both strictly necessary to sign you in:
| Name | Purpose | Duration |
|---|---|---|
sso_flow | Protects the single sign-on exchange between your identity provider and our servers | 10 minutes, restricted to the sign-in callback path |
providerSignin | Records which identity provider you signed in with, so the sign-in page can complete. Read once by the page, then deleted | Session |
Because both exist only to deliver the sign-in you asked for, neither requires consent under Article 5(3) of the ePrivacy Directive.
The application also keeps your session token, your workspace preferences and a local cache of files you open in your browser's own storage, so that the product works. None of it is used for tracking, profiling or advertising, and none of it leaves your browser for an advertising or analytics provider.
Product analytics for the platform are collected server-side from your authenticated use of the Services. They are not based on cookies, pixels, device fingerprinting, or cross-site tracking, and are never used for advertising.
Nothing you do inside the platform — your protocols, your research data, your account activity — is shared with any analytics or advertising provider, or used to target advertising at you anywhere.
3. We Do Not Show a Cookie Banner
We do not ask for cookie consent, because in the places whose law requires consent we do not set non-essential cookies at all.
If we determine your location to be in the European Economic Area, the United Kingdom, Switzerland or Quebec, you receive no analytics, attribution or advertising cookies. Nothing non-essential is written to your device, and you are never included in an advertising audience.
We determine location from your IP address at the moment of your request, and we keep no record of it. Where we cannot determine it, we treat you as though consent were required and set no non-essential cookies. We rely on our legitimate interest in applying the correct privacy rules to your visit (Article 6(1)(f) GDPR).
Visitors in those places are still counted, by cookieless aggregate measurement described in section 6.
4. Cookies We Set
A cookie is a small text file a website asks your browser to store, which the browser sends back on later visits. Related technologies do the same job by other means: a pixel is a tiny image whose retrieval signals that a page was opened, and local storage keeps data in the browser without sending it automatically. We use cookies. We use no pixels and no local storage on this website.
Cookies here fall into two categories. Analytics cookies count visits. Attribution cookies record which campaign brought you. We use no advertising or personalisation cookies, and this website currently sets no strictly necessary cookies at all. If we add one, to protect a form against abuse for example, it will be listed here.
These are the cookies currently in use on www.elnora.ai. They are set only for visitors outside the regions named in section 3.
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
eln_attr | Attribution (first party) | Elnora AI | Records the campaign parameters and advertising click identifiers present in the link you arrived by, so we can tell which of our marketing brings people to the site | 90 days |
_ga | Analytics (first party) | Google Analytics | Distinguishes one visitor from another for aggregate traffic reporting | 2 years |
_ga_Z0PSSP75YB | Analytics (first party) | Google Analytics | Maintains session state for the same aggregate reporting | 2 years |
We do not currently set advertising cookies. If that changes, this page will list them before they are set.
5. Providers We Use
| Provider | Role | What it receives | Their terms |
|---|---|---|---|
| Google Analytics (Google LLC) | Aggregate website traffic reporting | Pages viewed; the campaign, referring site, landing page and advertising click identifier you arrived by; and the fact that a form was submitted or a booking begun | Google Privacy Policy |
| Google Ads (Google LLC) | Measuring which of our ads led to an enquiry | Conversion events imported from Google Analytics. Personalised advertising is switched off on this link, so the data builds no advertising audience and is not used to show you ads elsewhere | Google Privacy Policy |
| Vercel Analytics (Vercel Inc.) | Cookieless aggregate traffic counts | Page requested, referrer, approximate location from your IP address, and a pseudonymous visitor value hashed from the request, which resets every day. No cookie | Vercel Privacy Notice |
We do not send your name, email address, telephone number, employer, or any other contact detail to these providers, in plain or hashed form. What you type into a form on this website reaches us and our email provider, and goes no further.
Some providers act as independent controllers of the data once it reaches them, under their own advertising and analytics terms.
The providers listed here are distinct from the subprocessors that handle Enterprise Customer Data on the platform. Those are listed in our Trust Center and in DPA Schedule 3. No provider on this page has any access to Customer Data.
6. Measurement Without Cookies
We use aggregate website analytics that sets no cookie and writes nothing to your device. Counting visitors without a cookie still needs some way to tell one visitor from another, so our provider derives a pseudonymous value by hashing the incoming request, including your IP address. That value resets every day, is never used to recognise you across other websites, and is not combined with any other data we hold about you.
We rely on our legitimate interest in understanding how much traffic our website receives (Article 6(1)(f) GDPR). You may object at any time by writing to privacy@elnora.ai, and we will stop.
This is how we count visitors who receive no cookies, including those in the European Economic Area, the United Kingdom, Switzerland and Quebec. Visitors whose browser sends Global Privacy Control or Do Not Track are excluded from this measurement as well, and are counted by nothing at all.
7. What We Will Not Do
- We do not sell your personal information, as "sale" is defined by applicable privacy law
- We do not upload customer lists, contact lists, or email addresses, in plain or hashed form, to advertising platforms
- We do not use anything from platform.elnora.ai to target advertising at you, and we do not share it with advertising platforms
- We do not build advertising audiences based on sensitive categories, including health, biometric, or research subject matter
- We do not fingerprint your device to recognise you across websites or over time, and we use no technique designed to work around your browser's privacy settings
8. Your Choices
Opt-out preference signals. We honour the Global Privacy Control (GPC) and Do Not Track (DNT) browser signals. If either is present, no analytics, attribution or advertising cookie is set, anywhere in the world, regardless of your location, and you are not added to any advertising audience. We treat GPC as a valid request to opt out of sale and sharing under applicable United States privacy law.
Browser controls. You can clear or block cookies at any time in your browser settings; every major browser offers this under its privacy settings. The website works normally without them.
Google Analytics opt-out. Google offers a browser add-on that prevents Google Analytics from collecting data on any site.
Ask us. Write to privacy@elnora.ai and we will act on your request.
9. Changes to This Policy
We update this page whenever the cookies we set or the providers we use change. Every previous version stays available at its own dated address.
Material changes to how we handle personal information are also reflected in our Privacy Policy.
10. Contact
Questions about this policy go to privacy@elnora.ai.
United States (Headquarters) Elnora AI, Inc., 48 South Rio Grande Street, Salt Lake City, UT 84101, USA
European Union / United Kingdom Elnora AI OÜ, Harju maakond, Saue vald, Laagri alevik, Vesiroosi tn 6, 76401, Estonia
For our full privacy commitments, including your rights over personal information, see the Privacy Policy.