Legal
Cookie Policy
Last updated: 8 October 2026
This Cookie Policy explains how Creosy uses cookies and similar technologies on creosy.ai, the Creosy web platform and Creosy-hosted campaign pre-landing pages. It explains what these technologies do, which choices you have and how to change them. Read it together with our Privacy Notice, available through our website, for information about personal information, recipients, international transfers and your privacy rights.
Optional technologies are off until you consent. You can accept optional categories, reject them or choose your settings. You can change your mind through Cookie Settings in our website footer or the platform's privacy controls.
1. Who we are
“Creosy”, “we”, “us” and “our” mean CREOSY TECHNOLOGIES LTD, incorporated in Cyprus, we are responsible for the technologies we deploy and the personal information we process for our own purposes. For questions or help with your choices, contact support@creosy.ai.
2. What cookies and similar technologies are
Cookies are small files that a website stores in your browser. They can help keep you signed in, remember a choice or recognise a returning browser. First-party cookies are set on the domain you visit; third-party cookies are set on another domain. A first-party cookie can still be used by a third-party service or for advertising.
We also use similar technologies where relevant, including browser local storage and session storage, tags, pixels and scripts. These can store or read information, send an event when a page loads or a button is clicked, or help reconstruct interactions with a page. Some work without placing a traditional cookie. References to “cookies” in this policy include these related technologies where the context allows.
Session cookies generally last for a browsing session, although browser session-restoration features can preserve them. Persistent cookies remain until their configured expiry or earlier deletion. Local storage can remain until it is removed by the website, browser or user.
3. The categories we use
| Category | Purpose and your choice |
|---|---|
| Strictly necessary | Technologies necessary to provide a service you request, such as authentication, account security, protecting transactions and remembering privacy choices. They operate without optional-cookie consent and cannot be switched off through Cookie Settings. We do not use this category for advertising or optional product analytics. |
| Functional | Optional technologies that remember preferences or provide additional convenience or personalisation beyond what is necessary for a requested service. They operate only with your consent. Turning them off may mean that preferences are not remembered or an optional feature is unavailable. |
| Performance and analytics | Optional technologies that help us understand visits, navigation, feature use and usability. This includes individual session replays only within the signed-in platform, as explained below. They operate only with your consent. |
| Advertising and campaign measurement | Optional technologies that attribute visits or conversions to advertising, measure campaign performance, or support personalised advertising and remarketing. They operate only with your consent. Where both measurement and personalisation are offered, Cookie Settings distinguishes those purposes. Consent to measurement alone does not authorise personalised advertising. |
Classification depends on the actual purpose and configuration. A tool is not strictly necessary simply because it is useful to Creosy, is provided by a payment provider or uses our own domain.
4. Services and providers
The following services form part of our cookie and tracking setup where enabled for a page or feature. This does not mean that every service loads on every page. Cookie Settings identifies the services available on the relevant part of Creosy and the technologies they use before you make your choice.
| Service | Use and consent category |
|---|---|
| Creosy's own technologies | Authentication, security and saving consent choices are strictly necessary where required for those purposes. Optional preferences are functional. Our internal tools for analysing customer journeys and product use fall under performance and analytics. |
| Google Analytics | Measures visits, traffic sources and product interactions under performance and analytics consent. Any use of this information for advertising also requires the relevant advertising permission. |
| Google Ads tracking | Measures advertising results and supports Creosy advertising and remarketing under the relevant advertising and campaign-measurement permissions. |
| Meta Pixel | Measures advertising results and, where permitted, supports Creosy audience creation, remarketing and advertising optimisation across Meta services such as Facebook and Instagram. Advertising and campaign-measurement permissions apply. |
| TikTok Pixel | Measures advertising results and, where permitted, supports audiences, remarketing and advertising optimisation on TikTok. Advertising and campaign-measurement permissions apply. |
| Pinterest Tag | Measures advertising results and, where permitted, supports audiences, remarketing and advertising optimisation on Pinterest. Advertising and campaign-measurement permissions apply. |
| X Pixel | Measures advertising results and, where permitted, supports website-activity audiences and remarketing on X. Advertising and campaign-measurement permissions apply. |
| Snap Pixel | Measures advertising results and, where permitted, supports audiences and advertising optimisation on Snapchat. Advertising and campaign-measurement permissions apply. |
| AppsFlyer | Supports web attribution and advertising-performance measurement under advertising and campaign-measurement consent. |
| Hotjar | Supports usability analysis and session replays within the signed-in platform under performance and analytics consent. It is not deployed for session replays on our public marketing website or campaign pre-landing pages. |
| Stripe and PayPal | May use technologies necessary to provide and protect the payment service you request. Any optional tracking on Creosy pages remains subject to the relevant optional consent. A provider's own website or payment environment may present additional privacy information and choices. |
Google Tag Manager may manage the deployment of tags. Using a tag manager does not exempt the tags it manages from your choices or allow them to run before the relevant consent.
Providers' information is available from Google, Meta, TikTok, Pinterest, X, Snap, AppsFlyer, Hotjar / Contentsquare, Stripe and PayPal. Some providers process information on our instructions; others also process it for their own disclosed purposes.
5. What information these technologies handle
Depending on the tool, page, settings and your choices, these technologies can collect or use:
Cookie identifiers and other online identifiers, IP address, browser and device information, and approximate location derived from technical information.
Pages visited, referral sources, campaign or ad-click identifiers, event times, session duration and interactions such as clicks, scrolling and navigation.
Permitted conversion events, such as a Creosy registration or subscription, and related event information relevant to measurement.
Associated page content within a signed-in platform session replay, subject to the safeguards described below.
Advertising partners may combine permitted information received from Creosy with information from their own services or other sources to measure advertising or personalise ads. This can involve recognising a browser or associating activity with an account held with that partner. Such information is not necessarily anonymous, even if it does not include a name.
Customer-email audience matching is described separately in our Privacy Notice. Cookie consent, account creation or permission to receive marketing emails does not by itself give unrestricted permission to upload customer lists. Any matching must have the permission required for the disclosed recipient and purpose. Hashing an email address does not make it anonymous. Advertising withdrawals and applicable opt-outs also apply to the related future uploads and audience updates.
6. Where tracking is used
Creosy's public website. Optional analytics help us understand visits and use. With the appropriate advertising permission, advertising tools help measure and promote Creosy, including remarketing. We do not use individual session replays on this public marketing website.
The signed-in customer platform. Necessary technologies support your account and requested service. Optional analytics help us understand how customers use the product. With analytics consent that explains session replay, Hotjar can reconstruct clicks, scrolling, navigation and associated page content to help us find usability problems. We apply data-minimisation measures, recording restrictions and access controls. Private account and campaign information is not made available to advertisers through session replays. Optional advertising events, where enabled, are subject to advertising permissions.
Customer-campaign pre-landing pages. These pages display the approved offer and link to the advertiser's website. We use visit information to measure that campaign. We do not use it to retarget visitors for Creosy, another customer or the advertiser's follow-up advertising. We do not use individual session replays on these pages. Optional measurement technologies require consent even though our purpose is measurement. Customers receive combined campaign statistics rather than individual visitor records. Where a provider's configuration would be incompatible with these limits, we do not enable that use on the pre-landing page.
After you follow a link to an advertiser's website, that website's privacy information and controls apply to its activities. Your choice on Creosy does not automatically give that advertiser permission to track you. An onward click does not by itself tell Creosy whether you purchased anything.
7. How consent works
We ask for consent before activating optional cookies or related optional tracking. This approach applies to visitors worldwide. We do not treat continued browsing, scrolling, signing in or accepting our Terms as consent to optional tracking.
Our controls let you Accept all optional, Reject all optional or Customise. Optional categories are off until selected. Rejecting them does not prevent use of the core service, although optional preferences and personalisation may be unavailable.
Your choice covers the purposes, providers and website or platform scope explained when you make it. We keep a record of the choice and the information presented. We may ask again when a stored choice expires, you clear the relevant browser data, or we introduce a change requiring new consent. An expired or missing choice does not authorise optional tracking.
These choices apply to the relevant collection and use, including optional tracking events sent through servers or APIs. A technology is not exempt just because it sends measurements without cookies. We do not send optional analytics or advertising measurements before the relevant consent.
8. Changing your choices
Open Cookie Settings in the website footer or the platform's privacy controls to review or withdraw optional consent at any time. Withdrawing is as easy as giving consent. We stop the relevant future optional collection and use and remove optional cookies or storage that we control where technically possible. We also apply the change to relevant server-side events and audience updates.
Withdrawal does not affect the lawfulness of processing before it took effect, and it is not automatically a request to delete every previously collected record. You may separately request deletion or exercise other rights through support@creosy.ai. We retain the minimum information needed to remember and demonstrate your choice.
Your choice is usually stored for the browser or device concerned. You may need to make it again on another browser or device. Where we can associate an advertising opt-out with your account and applicable law requires it, we apply it to the account as well.
You can also use browser settings to block or delete cookies and other site data. Blocking necessary technologies may interfere with login, security or payments. Deleting cookies alone may not remove local storage or information already held by a provider. A provider's advertising controls can offer additional choices; they do not replace Creosy's controls.
Where applicable law requires us to recognise an opt-out preference signal, including Global Privacy Control, we honour it for the relevant sale, sharing or targeted advertising. We do not require an account to process a legally recognised browser signal. Traditional Do Not Track signals are different; Creosy does not currently respond to those signals.
Advertising disclosures can qualify as sale, sharing or targeted advertising under some US state laws even when no money is paid for the information. Use Cookie Settings or contact support@creosy.ai to exercise the applicable opt-out. Rejecting personalised advertising does not guarantee that you will stop seeing all ads.
9. Lifetimes and retention
Cookie Settings provides the current inventory for the relevant page or service, including cookie or storage names, providers, domains, purposes and configured lifetimes, including whether an expiry renews after use. Browser restrictions or earlier deletion may shorten those periods. Technologies and their settings can change; the inventory is updated to reflect what is deployed.
A browser cookie's lifetime is different from how long information collected through it is held on servers. Under our Privacy Notice, identifiable product-usage analytics and session replays under Creosy's control are retained for up to 12 months after collection, then deleted or irreversibly anonymised. Pre-landing visitor events are retained for the period needed to measure and reconcile the campaign and resolve reporting issues, then deleted or irreversibly anonymised.
We keep consent evidence while relying on the permission and for three years after it ends; evidence of a request to change or withdraw a choice is kept for three years after the request is fulfilled. Minimal suppression or advertising opt-out information is kept as necessary to respect the choice, with an annual necessity review. These recordkeeping periods do not authorise continued optional tracking after consent ends.
Our Privacy Notice explains the other retention criteria, legal exceptions and deletion rights. Providers acting independently may have their own retention periods, as described in their notices.
10. Legal grounds, transfers and your rights
We rely on consent for the optional storage, access and related optional tracking described here. Strictly necessary technologies are used without optional-cookie consent only where they qualify for the applicable exemption. Where these activities involve personal information, the relevant legal ground may be performance of a contract, a legal obligation or our legitimate interests in providing a secure service, as explained in our Privacy Notice. A storage exemption does not remove personal-information obligations.
Providers may process information in the EU, the United States or other countries. Our Privacy Notice explains recipients, applicable international-transfer safeguards and how to exercise access, correction, deletion, withdrawal, objection, opt-out and other available rights or make a complaint.
11. Changes and contact
We update this policy when our practices or requirements change. The date above shows the latest revision. We provide additional notice and request fresh consent where needed before introducing a materially different optional use. Publishing an update does not itself give us that consent.