top of page
ReqTangle Cookie Policy

Summary

This Cookie Policy explains how ReqTangle (Ikizler AB) uses cookies and similar tracking technologies on our websites and services. We use cookies to provide essential functionality, remember your preferences, and understand how you use our platform.

**Key Points:**

- We use cookies to keep you logged in and remember your settings
- We do not use advertising or cross-site tracking cookies
- You can control cookie preferences through your browser or our cookie settings
- Essential cookies are necessary for the service to work
- Analytics cookies are optional and require your consent

This policy complies with the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive (2002/58/EC).

​

1. What Are Cookies?

 

Definition

Cookies are small text files that websites store on your device (computer, smartphone, tablet) when you visit them. They help websites:

- Remember your login and preferences
- Understand how you use the site
- Provide security and prevent fraud
- Improve performance and user experience

 

Types of Storage Technologies

This policy covers:

- **HTTP Cookies** - Standard browser cookies
- **Local Storage** - Browser-based data storage (HTML5)
- **Session Storage** - Temporary storage cleared when you close your browser
- **IndexedDB** - Structured data storage for offline functionality

For simplicity, we refer to all these as "cookies" throughout this policy.

​

2. Cookies We Use

 

A. Essential Cookies (Always Active)

These cookies are necessary for ReqTangle to function. They cannot be disabled without breaking the service.

| Cookie Name           | Purpose                                             | Duration | Category       |
| --------------------- | --------------------------------------------------- | -------- | -------------- |
| `session_id`          | Keeps you logged in during your session             | Session  | Authentication |
| `csrf_token`          | Protects against cross-site request forgery attacks | Session  | Security       |
| `auth_token`          | Verifies your identity and access rights            | 7 days   | Authentication |
| `consent_preferences` | Remembers your cookie consent choices               | 1 year   | Preferences    |

**Legal Basis:** GDPR Article 6(1)(b) - Necessary for contract performance  
**ePrivacy Compliance:** Essential cookies do not require consent (Recital 66)

​

B. Functional Cookies (Optional)

These cookies enhance your experience but are not strictly necessary.

| Cookie Name       | Purpose                                          | Duration | Category        |
| ----------------- | ------------------------------------------------ | -------- | --------------- |
| `language_pref`   | Remembers your language choice (English/Swedish) | 1 year   | Preferences     |
| `ui_theme`        | Stores your theme preference (light/dark mode)   | 1 year   | Preferences     |
| `sidebar_state`   | Remembers whether sidebar is expanded/collapsed  | 30 days  | UI State        |
| `recent_projects` | Quick access to your recently viewed projects    | 30 days  | User Experience |

**Legal Basis:** GDPR Article 6(1)(a) - Consent  
**Default:** Enabled (you can opt out in cookie settings)

 

C. Analytics Cookies (Optional)

We use analytics to understand how users interact with ReqTangle to improve the product.

#### During Beta Phase

| Cookie Name          | Purpose                                   | Duration | Provider    |
| -------------------- | ----------------------------------------- | -------- | ----------- |
| `_analytics_session` | Tracks unique visitors and sessions       | 24 hours | First-party |
| `_page_views`        | Counts page views and navigation patterns | 24 hours | First-party |

**What we track (anonymized):**

✓ Pages visited and features used  
✓ Time spent in application  
✓ Browser type and operating system  
✓ General geographic region (country/city level)  
✓ Error messages and performance metrics  

**What we DO NOT track:**

❌ Specific requirement content  
❌ Personal identifiable information  
❌ Behavior across other websites  
❌ Individual user actions (only aggregate patterns)  

**Legal Basis:** GDPR Article 6(1)(a) - Consent  
**Default:** Opt-in required (you must consent to enable)

**IP Address Handling:** IP addresses are anonymized before logging (last octet removed).

 

D. Third-Party Cookies

ReqTangle minimizes third-party cookies. Current third-party cookies:

#### Wix Platform (Marketing Website Only)

If you visit our marketing website (reqtangle.ai), Wix may set cookies for:

- Website hosting and content delivery
- Basic analytics (if enabled)
- Security and DDoS protection

**Note:** The ReqTangle app (app.reqtangle.ai) does not use Wix cookies.

For details on Wix cookies: https://www.wix.com/about/privacy

#### Authentication Providers (OAuth)

If you sign in using third-party authentication (Google, Microsoft):

- OAuth providers may set their own cookies
- These are governed by their privacy policies
- You can choose email/password login to avoid these cookies

​

E. Cookies We DO NOT Use

To be clear about what we don't do:

❌ **Advertising Cookies** - We do not show ads or track you for advertising  
❌ **Social Media Tracking** - No Facebook Pixel, Twitter tags, etc.  
❌ **Cross-Site Tracking** - We don't follow you around the web  
❌ **Behavioral Profiling** - We don't build profiles for marketing  
❌ **Third-Party Data Sharing** - No data brokers or aggregators  

​

3. Cookie Consent & Control

 

Cookie Banner

When you first visit ReqTangle, you'll see a cookie consent banner with options:

**"Accept All"** - Enable all cookies (essential, functional, and analytics)  
**"Reject All"** - Only essential cookies (functional and analytics disabled)  
**"Cookie Settings"** - Granular control over each category  

### Changing Your Preferences

You can change cookie settings at any time:

**In ReqTangle:**

1. Click **"Cookie Settings"** in the footer
2. Toggle categories on/off
3. Save your preferences

**In Your Browser:**

- Most browsers allow you to block or delete cookies
- Instructions below for common browsers

**Effect of blocking essential cookies:**  
⚠️ ReqTangle will not function correctly. You will likely be unable to log in or use key features.

​

4. Managing Cookies in Your Browser

​

Desktop Browsers

**Google Chrome:**

1. Settings → Privacy and Security → Cookies and other site data
2. Choose "Block third-party cookies" or "Block all cookies"

**Mozilla Firefox:**

1. Settings → Privacy & Security → Cookies and Site Data
2. Choose "Delete cookies and site data when Firefox is closed"

**Microsoft Edge:**

1. Settings → Cookies and site permissions → Cookies and site data
2. Toggle "Block third-party cookies"

**Safari:**

1. Preferences → Privacy → Cookies and website data
2. Choose "Block all cookies" or "Prevent cross-site tracking"

### Mobile Browsers

**Chrome (Android/iOS):**
Settings → Site Settings → Cookies → Block cookies

**Safari (iOS):**
Settings → Safari → Block All Cookies

**Samsung Internet:**
Settings → Sites and downloads → Block cookies

### Browser Plugins

You can also use browser extensions:

- **uBlock Origin** - Block tracking scripts
- **Privacy Badger** - Intelligent tracker blocking
- **Cookie AutoDelete** - Automatically delete cookies when tabs close

​

5. Local Storage & Other Technologies

 

HTML5 Local Storage

ReqTangle uses browser local storage for:

- Caching project data for faster loading
- Storing draft requirements to prevent data loss
- Offline functionality (if enabled)
- UI state persistence

**How to clear:**

**Chrome:** F12 → Application → Local Storage → Right-click → Clear  
**Firefox:** F12 → Storage → Local Storage → Right-click → Delete All  
**Safari:** Develop → Show Web Inspector → Storage → Local Storage → Clear  

### Session Storage

Used for temporary data during your current session:

- Form inputs (to prevent loss on accidental refresh)
- Wizard progress tracking
- Temporary calculation results

**Automatically cleared** when you close your browser tab.

​

6. Data Protection & Privacy

GDPR Compliance

All cookies comply with GDPR requirements:

- **Lawful Basis:** Consent (Article 6(1)(a)) or necessity (Article 6(1)(b))
- **Data Minimization:** Only essential data collected (Article 5(1)(c))
- **Purpose Limitation:** Used only for stated purposes (Article 5(1)(b))
- **Transparency:** This policy explains all uses (Articles 12-14)

### Your Rights

You have the right to:

✓ **Access** - See what cookies are set for you  
✓ **Withdraw Consent** - Change your cookie preferences at any time  
✓ **Object** - Opt out of non-essential cookies  
✓ **Erasure** - Delete cookies via browser or our settings  

For more on privacy rights, see our [Privacy Policy](https://www.reqtangle.ai/privacy-policy).

### Data Retention

| Cookie Type           | Retention                        |
| --------------------- | -------------------------------- |
| Session cookies       | Deleted when you close browser   |
| Authentication tokens | 7 days or until logout           |
| Preference cookies    | 1 year (or until deleted)        |
| Analytics cookies     | 24 hours (anonymized thereafter) |

​

7. Do Not Track (DNT)

Our DNT Policy

ReqTangle respects **Do Not Track (DNT)** browser signals for optional analytics:

- ✅ If DNT is enabled, we disable optional analytics cookies
- ✅ Essential cookies still function (required for service)
- ✅ We do not override your DNT preference

**How to enable DNT:**

**Chrome:** Settings → Privacy and Security → Send a "Do Not Track" request  
**Firefox:** Settings → Privacy & Security → Send websites a "Do Not Track" signal  
**Safari:** Preferences → Privacy → Ask websites not to track me  

​

8. Cookies & Security

Security Cookies

Some cookies enhance security:

- **CSRF Tokens** - Prevent cross-site request forgery attacks
- **Session Integrity** - Detect session hijacking attempts
- **Brute-Force Protection** - Rate-limit login attempts

These cookies protect you and are essential for secure operation.

### Secure Cookie Attributes

ReqTangle's cookies use security best practices:

✓ **HttpOnly Flag** - Prevents JavaScript access (reduces XSS risk)  
✓ **Secure Flag** - Only transmitted over HTTPS  
✓ **SameSite Attribute** - Prevents CSRF attacks  
✓ **Short Expiration** - Authentication tokens expire regularly  

​

9. Children's Privacy

 

ReqTangle is not intended for children under 16 years of age.

We do not:

- Knowingly collect cookies from children
- Target children with our services
- Create profiles of child users

If we discover a child's data in cookies, we will delete it immediately.

​

10. Changes to This Policy

How We Update

We may update this Cookie Policy to reflect:

- Changes to cookies we use
- New features or technologies
- Legal or regulatory requirements
- User feedback and best practices

### Notification

For material changes:

- ✅ Update the "Last Updated" date at the top of this policy
- ✅ Notify you via email (if subscribed)
- ✅ Display a notification in the app
- ✅ May require renewed consent for new cookie categories

**Your continued use after changes constitutes acceptance** of the updated policy.

​

11. International Data Transfers

EU Data Residency

All cookies and related data are:

- Stored on servers within the European Union (Sweden)
- Processed by EU-based entities (Ikizler AB, Codicent Inside AB)
- Not transferred outside the European Economic Area (EEA)

**No third-country transfers** - Your cookie data stays in the EU.

​

12. Contact & Questions

 

Cookie Questions

For questions about cookies or this policy:

**General Inquiries:**  
Email: info@reqtangle.ai  
Website: https://www.reqtangle.ai/cookies

**Data Protection Officer:**  
Email: dpo@reqtangle.ai  
Postal: Ikizler AB, Hageby Allé 21 b, 141 69 Huddinge, Sweden

### Complaints

If you believe our cookie practices violate your rights:

**Swedish Supervisory Authority:**  
Integritetsskyddsmyndigheten (IMY)  
Email: imy@imy.se  
Website: https://www.imy.se  
Phone: +46 (0)8-657 61 00

​

13. Cookie List Summary

Quick reference of all ReqTangle cookies:

Essential (Always Active)

- `session_id` - Session management
- `csrf_token` - Security protection
- `auth_token` - Authentication
- `consent_preferences` - Cookie choices

### Functional (Opt-Out)

- `language_pref` - Language selection
- `ui_theme` - Theme preference
- `sidebar_state` - UI state
- `recent_projects` - Quick access

### Analytics (Opt-In)

- `_analytics_session` - Session tracking
- `_page_views` - Usage analytics

​

14. Technical Details

For developers and technical users:

Cookie Attributes

```
Set-Cookie: session_id=<value>; 
  Secure; 
  HttpOnly; 
  SameSite=Strict; 
  Path=/; 
  Max-Age=604800
```

Storage APIs Used

- **Cookies:** Authentication, security, preferences
- **LocalStorage:** Draft saving, offline cache
- **SessionStorage:** Temporary wizard state
- **IndexedDB:** Offline project data (opt-in feature)

Data Flows

1. User visits ReqTangle → Essential cookies set
2. User consents to analytics → Analytics cookies set
3. User logs in → Auth tokens issued
4. User closes browser → Session cookies deleted
5. User returns → Preference cookies remember settings

​

Acknowledgment

By using ReqTangle, you acknowledge that:

- You have read and understood this Cookie Policy
- You consent to essential cookies as necessary for the service
- You can control optional cookies through settings
- You can withdraw consent at any time

Thank you for trusting ReqTangle with your data.

bottom of page