Cookie Policy

The Fhenix website at fhenix.io and its subdomains (the "Website") is published, owned, and operated by FHE Labs Ltd., a company incorporated under the laws of the State of Israel, company number 516824299, of 82 Yigal Alon Street, Tel Aviv, Israel ("FHE Labs", "we", "us", "our").

This policy explains what we store on your device, why, on what legal basis, how long it lasts, and how you can change your mind at any time. It should be read together with our Privacy Policy, which explains more generally how we handle personal data.

This policy covers the Website only. Products described on the Website are used in applications hosted outside fhenix.io. Those applications set their own cookies and are covered by their own notices, not by this one.

1. What cookies and similar technologies are

A cookie is a small text file placed on your device when you visit a website. It lets the site recognize your device on a later page or a later visit. A cookie set by the site you are visiting is a first-party cookie; one set by another domain is a third-party cookie.

This policy also covers other ways of storing or reading information on your device, including local storage, session storage, and pixel trackers. We treat all of them the same way, because the law that matters here governs any storage of information on your device, not cookies specifically. Three of the items listed below are not cookies at all: one is a pixel tracker, and two are stored in your browser's local storage.

That distinction matters on our Website in one more way. The demonstration applications on our subdomains connect to a digital wallet, and wallet connection state is held in your browser's local storage rather than in a cookie. It is still information stored on your device, and it is still covered by this policy.

2. What we use them for

Strictly necessary. These make the Website work: page delivery, security and bot protection, and remembering the cookie choice you made. They are set without asking, because they are necessary for a service you have requested and are exempt from consent.

Preferences. These remember choices you make, including the wallet connection state held by a demonstration application. We set them only if you allow it.

Statistics. These tell us which pages are visited, how people arrive, and where they run into problems, so that we can improve the Website. We set them only if you allow it.

Marketing. These support advertising. They let us measure whether people who see our advertising go on to visit us, build audiences for advertising campaigns, and recognize people who have asked to hear from us. Some of these are set by Google and Mailchimp, who use them across other websites as well as ours. We set them only if you allow it.

We do not sell personal data. But we should be plain about what the marketing category means: if you allow it, Google and Mailchimp receive information about your visit that they combine with information from other sites, for advertising purposes. If you would rather they did not, refuse the marketing category. The Website works exactly the same either way.

3. The cookies we use

Our consent tool. Cookiebot, operated by Usercentrics A/S in Denmark, records the cookie choice you make so that we do not have to ask again on every page. It sets a cookie named CookieConsent. This is strictly necessary and is set without consent, because without it we could not honor your choice.

Our hosting and delivery. The Website is built and hosted on Webflow and delivered through Cloudflare. Cloudflare sets a strictly necessary cookie to distinguish real visitors from automated traffic.

Our analytics. We use Google Analytics 4, loaded through Google Tag Manager. It sets _ga and _ga_WT38P5MVGL, which distinguish one visitor from another and hold session state. These are statistics cookies and are set only if you allow them.

Our advertising measurement. Our Google tag is linked to Google Ads. If you allow marketing cookies, it sets _gcl_au and _gcl_ls, which measure whether advertising led you to us, and it loads a pixel tracker at pagead/1p-user-list, which adds you to advertising audiences Google can use on other websites.

Our mailing list. Mailchimp's site tracking script sets _mc_anon_id and _mcid if you allow marketing cookies. These let Mailchimp recognize a visitor across sessions and connect a visit to a subscription. Our subscription and partnership forms themselves are hosted by Mailchimp on its own domain, where Mailchimp's own notice applies.

Embedded content. We embed an events listing from Luma (lu.ma) and content from X. These set their own cookies when the embedded content loads, including Luma's own device identifier and Cloudflare cookies serving it. Luma and X decide their own purposes for what they collect; their own policies govern it, not this one.

Cookie inventory

The cookies and similar technologies that may be placed on your device when you visit the Website:

Durations are maximums. An item may go sooner if you clear your browser. Where a row shows a type beneath the name, that item is not an HTTP cookie but is covered by this policy in the same way.

Our hosting, delivery, and embedded content providers also set strictly necessary cookies that are not individually listed above. A current, automatically generated version of this list, including those, is published on this page directly below. It is regenerated from a monthly scan of the Website, so where the two differ, the generated list is the accurate one.

4. Our consent banner

When you first visit the Website we show a banner. Strictly necessary items are set before you choose, because they are exempt. Nothing in the preferences, statistics, or marketing categories is set until you allow it.

The banner lets you accept everything, refuse everything that is not strictly necessary, or choose category by category. Accepting and refusing are presented with equal prominence and take the same number of clicks. Refusing has no effect on your access to the Website or on any part of it that you came to use.

We remember your choice for [12] months. After that we ask again. We keep a record of the consents given and refused, with the time each was made, so that we can show we asked.

5. Changing your mind

You can change or withdraw your choice at any time, and withdrawing is as easy as giving it. Use the Cookie preferences link in the footer of any page. Your new choice takes effect immediately, and anything you withdraw consent for stops being set from that moment.

Withdrawing consent stops further collection. It does not by itself delete what a third party has already collected. For that, use the rights described at Section 9, or the opt-out controls the provider offers. Google's ads settings and Mailchimp's privacy page each let you control what they hold.

6. Managing cookies in your browser

Separately from our banner, you can control cookies in your browser settings. Most browsers let you see what is stored, delete it, block third-party cookies, or block everything. The help pages for Chrome, Firefox, Safari, and Edge each explain how.

Two things to know. Blocking strictly necessary cookies may stop parts of the Website working. And clearing your browser also clears the record of your cookie choice, so we will ask again on your next visit.

Local storage used by a demonstration application is cleared through your browser's site data controls. Disconnecting your wallet in the application also clears the connection state.

7. How long we keep things

Each item expires after the period shown for it in the list on this page. Those are maximums; an item may go sooner if you clear your browser.

Analytics data is kept separately from the cookies that collect it. Event-level analytics data is kept for 2 months and user-level analytics data for 14 months, after which it is deleted. Aggregated reports, which do not identify anyone, are kept for as long as we run the Website.

Data collected by Google, Mailchimp, Luma, and X through the items listed above is kept according to their own retention policies, which we do not control.

8. International transfers

We are established in Israel, which is the subject of a European Commission adequacy decision and equivalent UK adequacy regulations, so transfers from the EEA or the United Kingdom to us do not require an additional safeguard.

Google, Intuit (Mailchimp), Cloudflare, Luma, and X are established in the United States. Where information collected through the items listed above reaches them, we rely on the transfer mechanisms set out in our Privacy Policy, which states the mechanism for each recipient.

9. Your rights

Where information collected through cookies is personal data, you have the rights set out in our Privacy Policy, including the right to ask what we hold, to have it corrected or deleted, to object to processing, to withdraw consent, and to complain to a supervisory authority. The Privacy Policy explains how to exercise them and which authority applies to you.

Where a third party named above decides its own purposes for what it collects, those rights are exercised against that party under its own policy. We will tell you who to contact if you ask.

10. Changes to this policy

We may update this policy, for example if we add or remove a provider. Each version carries a version number and an effective date at the top. If a change means we want to store something new that needs your consent, we will ask you again rather than relying on a consent you gave earlier.

11. Contact

Questions about this policy, or about cookies on the Website:

FHE Labs Ltd.
82 Yigal Alon Street, Tel Aviv, Israel
legal@fhenix.io

‍