1. Technologies currently in use
The current release uses technologies necessary for authentication, session handling, active-workspace selection, and storing consent and language preferences, alongside optional Google Analytics measurement that activates only after your explicit consent. The current code does not include advertising cookies or marketing tracking pixels.
| Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| sb_access_token | ArabData | Necessary (HttpOnly) | Maintains the authenticated sign-in session and account security. | Up to 1 hour |
| sb_refresh_token | ArabData | Necessary (HttpOnly) | Refreshes the authenticated session without exposing the refresh token to browser JavaScript. | Up to 30 days |
| arabdata_active_ws | ArabData | Necessary (HttpOnly) | Stores the active workspace selection for the account to route requests accurately. | Up to 30 days |
| ad_trial_browser_v1 | ArabData | Necessary (HttpOnly, abuse prevention) | A random server-signed identifier helps flag repeated free-trial claims from one browser; it does not fingerprint your device or track browsing activity. Suspicious trial claims may be reviewed without blocking account access or paid plans. | Up to 90 days |
| arabdata_cookie_consent | ArabData | Necessary (Consent record) | Records the user’s choice to accept or reject optional cookie categories. | 6 months (180 days) |
| arabdata_language_preference | ArabData | Necessary (Local storage) | Remembers the Arabic or English language preference on the device for correct layout and direction. | Until changed by the user or site data is cleared |
| arabdata_analytics_consent_v1 | ArabData | Necessary (Backup local storage) | Backup record of analytics consent choice for client-side compatibility. | Until site data is cleared |
| _ga, _ga_* | Google LLC (Google Analytics 4) | Analytics (Optional) | Measures aggregate visits, traffic sources, and popular pages after explicit consent without collecting form inputs. | Up to 2 years |
2. Managing and withdrawing your consent
You can modify your preferences or withdraw analytics consent at any time without logging out or clearing your browser. When consent is withdrawn, analytics collection stops immediately and analytics cookies are cleared.
3. Security characteristics for necessary cookies
Authentication and workspace cookies are HttpOnly, use SameSite=Lax, and are Secure in production over HTTPS. Browser JavaScript cannot read HttpOnly cookies to protect accounts from XSS attacks.
4. Analytics and marketing
We use Google Analytics to gather aggregate traffic metrics (such as visit counts, geographic origins, traffic sources, and most-visited pages). This service is disabled by default and is activated only after your explicit consent via the cookie banner. We never transmit form inputs, account details, or workspace data to Analytics. Declining analytics never restricts site usage, account creation, or any platform features.
With analytics consent, we measure milestones such as account creation, trial activation, search, successful contact reveal and paid activation using pseudonymous measurement identifiers. The arabdata_measurement_context cookie keeps browser and session identifiers for up to 30 days to connect visits with later manual activation. Advertising measurement requires a separate optional choice in cookie settings. Personalized ads stay disabled. Search text, contact values and form inputs are not sent to Google.
5. Browser controls
You can also delete cookies and local storage through your browser settings. Blocking necessary cookies may prevent sign-in, workspace selection, or other core functions from working correctly.
6. Future technologies
If we later add any additional tools or non-essential technologies, we will update this inventory and require explicit consent prior to activation.