Cookie Policy

Frontal Labs, Inc. ("Frontal," "we," "us," or "our") uses cookies and similar tracking technologies on its website (https://frontal.dev) and within its platform and services (collectively, the "Services"). This Cookie Policy explains what these technologies are, how and why we use them, and the choices you have regarding their use.

This Cookie Policy is part of our Privacy Policy.

1. WHAT ARE COOKIES AND SIMILAR TECHNOLOGIES

1.1 Cookies. Cookies are small text files placed on your device (computer, tablet, or mobile device) when you visit a website or use an online service. Cookies are widely used to make websites and services work, work more efficiently, and provide information to the operators.

1.2 Types of Cookies.

Session Cookies are temporary cookies that expire and are automatically deleted when you close your browser.
Persistent Cookies remain on your device after you close your browser until they expire or you delete them. Persistent cookies enable a website or service to remember you and your preferences across browsing sessions.
First-Party Cookies are set by the website or service you are visiting.
Third-Party Cookies are set by a domain different from the website or service you are visiting, typically by third-party service providers that provide functionality, analytics, or advertising.

1.3 Similar Technologies. In addition to cookies, we use similar tracking technologies, including:

Web Beacons (Pixel Tags, Clear GIFs): Small transparent graphic images embedded in web pages, emails, or applications that allow us to track when a page or email has been viewed.
Local Storage: Browser-based storage mechanisms (including HTML5 local storage and session storage) that store data on your device.
Software Development Kits (SDKs): Code libraries embedded in mobile or desktop applications that collect information about usage.
Device Fingerprinting: Techniques for identifying a device based on its unique configuration characteristics.

2. COOKIES WE USE

We use the following categories of cookies and similar technologies:

2.1 Strictly Necessary Cookies

These cookies are essential for the operation of the Services. They enable core functionality such as authentication, security, network management, and accessibility. The Services cannot function properly without these cookies.

Category	Purpose	Examples	Duration
Authentication	Maintain login sessions and verify identity	Session tokens, SSO state	Session to 30 days
Security	Protect against fraud, abuse, and unauthorized access	CSRF tokens, rate limiting state	Session
Load Balancing	Distribute traffic across servers for performance	Load balancer session affinity	Session
User Interface	Remember user interface preferences during a session	Session state, form progress	Session
Cookie Consent	Store your cookie preferences and consent choices	Consent management state	12 months

2.2 Functional Cookies

These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.

Category	Purpose	Examples	Duration
Preferences	Remember language, region, and display settings	Language code, theme preference	Up to 12 months
Account Settings	Store account-specific customizations	Dashboard layout, default project	Up to 12 months
Feature Customization	Remember how you use specific features	API explorer state, code editor preferences	Session to 30 days
Ask AI History	Keep your Ask AI conversation on your device between visits	Chat transcript in browser storage (IndexedDB)	Cleared daily

2.3 Performance and Analytics Cookies

These cookies help us understand how the Services are used, measure performance, and identify areas for improvement.

Analytics on our Site run in a cookieless mode until you consent. In that mode nothing is stored on your device, no persistent identifier is created, and visits are counted using a privacy-preserving hash calculated on our analytics provider's servers. Accepting analytics allows a persistent identifier so repeat visits can be recognised, which makes the measurements below more accurate.

Category	Purpose	Examples	Duration
Usage Analytics	Understand how users interact with the Services	Page views, feature usage, session duration	Up to 13 months
Performance Monitoring	Measure service response times and reliability	API latency, error rates	Up to 13 months
Error Reporting	Capture diagnostic information for troubleshooting	Error traces, crash reports	Up to 13 months
A/B Testing	Test different versions of features and interfaces	Experiment assignments	90 days

2.4 Campaign Attribution

We record how you arrived at our Site so we can understand which channels bring people to us. We do not use advertising networks, behavioral advertising cookies, or cross-site tracking, and we do not operate a marketing cookie category.

Campaign attribution is stored on your device only if you consent to analytics. Without that consent it is held in memory for the current visit and nothing is written to your device.

Category	Purpose	Examples	Duration
Campaign Attribution	Understand how users discover our Services	UTM parameters, referral source, landing page	Up to 90 days

3. THIRD-PARTY COOKIES

Some cookies and similar technologies used on the Services are placed by our third-party service providers ("Subprocessors"). These providers are listed in our Subprocessors List and may include:

Analytics Providers: To measure and analyze usage of the Services.
Error Monitoring Providers: To capture and report errors and performance issues.
Customer Communication Providers: To manage customer communications and support interactions.
Authentication Providers: To enable single sign-on and identity verification.

Third-party providers may use the data they collect for their own purposes in accordance with their privacy policies. You can review the privacy policies of our Subprocessors via our Subprocessors List.

Cookie durations vary as described in the tables above. Session cookies are deleted when you close your browser. Persistent cookies remain until they expire or are deleted by you.

5. YOUR CHOICES

When you first visit our Site, you are presented with a cookie banner that allows you to accept or decline non-essential cookies. You can update your cookie preferences at any time through the cookie settings link in the footer of our Site.

5.2 Browser Controls

Most web browsers allow you to manage cookies through browser settings. You can typically:

View cookies stored on your device and delete them individually or in bulk.
Block third-party cookies.
Block cookies from specific sites.
Block all cookies.
Configure automatic deletion of cookies when you close your browser.

Methods for managing cookies vary by browser. Refer to your browser's help documentation:

5.3 Impact of Disabling Cookies

If you disable or block cookies, certain features of the Services may not function properly, including:

Account authentication and session management.
Saving preferences and settings.
Secure areas of the platform.

Strictly necessary cookies cannot be disabled through our cookie settings because they are required for the Services to operate. Disabling cookies through your browser may prevent the Services from functioning.

5.4 Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no consensus on how to interpret DNT signals, the Services do not currently respond to DNT signals. We monitor developments in this area and will update this policy if our approach changes.

5.5 Global Privacy Control

The Services do not currently respond to the Global Privacy Control (GPC) signal. We do not sell or share personal information and we do not use advertising networks, so there is no sale or sharing for GPC to opt out of. We monitor developments in this area and will update this policy if our approach changes.

6. DATA COLLECTED THROUGH COOKIES

Information collected through cookies and similar technologies may include:

IP address.
Browser type, version, and language.
Operating system and device type.
Referring and exit URLs.
Pages visited, features used, and interactions with the Services.
Session duration and timestamps.
Device identifiers.
Crash and error data.
Performance and latency metrics.

We treat information collected through cookies in accordance with our Privacy Policy. Information that directly identifies you is handled as Personal Data. Aggregated or de-identified information that cannot reasonably identify you is treated as Non-Personal Information.

7. LAWFUL BASIS FOR PROCESSING

7.1 EEA, UK, and Switzerland

For users in the European Economic Area, the United Kingdom, and Switzerland:

Strictly Necessary Cookies are placed based on our legitimate interest in providing and securing the Services and the necessity of these cookies for the performance of a contract with you.
Functional Cookies are placed based on your consent.
Performance and Analytics Cookies are placed based on your consent. Before you consent we measure aggregate site traffic without storing anything on your device, on the basis of our legitimate interest in understanding how our Site is used.

You may withdraw consent at any time through the cookie settings on our Site.