Cookie Policy.

What cookies and similar technologies are

A cookie is a small text file a website sets on your device when you visit. Some are read by your browser only; some are sent back to the website on each subsequent request. We also use the browser's local storage in a similar way: small named values stored in your browser, not transmitted to the server. We do not use pixel tags, web beacons, third-party SDKs, or device-fingerprinting techniques on this site.

Together these technologies are how a website remembers your preferences between page loads and visits. For the purposes of DPDPA section 2(t), GDPR Recital 30, and Article 5(3) of the ePrivacy Directive, any cookie or local-storage value that contains an identifier capable of distinguishing one visitor from another is treated as personal data.

The legal basis

Strictly necessary cookies are set on the basis of DPDPA section 7 (legitimate uses) and Article 5(3) of the ePrivacy Directive 2002/58/EC (and UK PECR Regulation 6(4) for UK visitors).

All other cookies (Analytics, Preferences, Marketing) are set only with your prior, express, granular, freely-given, specific, informed, and unambiguous consent (DPDPA section 6; GDPR Articles 4(11) and 7; ePrivacy Directive Article 5(3); UK PECR Regulation 6; CCPA opt-in for sensitive PI processing). For California residents, we honour Global Privacy Control (GPC) signals as a valid opt-out of sale and sharing under CCPA / CPRA (CCPA Regulations section 7025).

Your choices

On your first visit and again whenever you ask, a cookie banner offers granular per-category choices:

• Strictly Necessary (always on)
• Analytics (off by default)
• Preferences (off by default)
• Marketing (off by default; we do not currently use Marketing cookies)

You can accept all, reject all, or pick categories. The Reject all option is presented as prominently as Accept all. Refusing non-essential cookies does not affect your access to the site (no cookie wall, per Article 5(3) ePrivacy Directive and EDPB Guidelines 05/2020 section 39). The banner returns whenever you click the Manage cookies link in the footer; you can also withdraw consent by emailing hello@smmarun.ai with the subject Cookies request.

The cookies and storage we use

Strictly necessary

These are required for the site to work. We do not need your consent for them under DPDPA, GDPR, or PECR.

• smmarun-consent-v1 (first-party local storage). Stores your cookie choice: timestamp, banner version, and categories accepted. Set when you click Accept, Reject all, or any category toggle. Lifetime: until you change your choice or clear browser storage. Controller: SMMARUN.

Analytics (only with your consent)

These help us understand how the site is being read so we can improve it. They are not set unless you explicitly accept.

• _ga (third-party cookie set by Google LLC). Distinguishes one visitor from another. Lifetime: 2 years. Google LLC is an EU-US Data Privacy Framework participant. Privacy: policies.google.com/privacy. Opt-out tool: tools.google.com/dlpage/gaoptout.
• ga (third-party cookie set by Google LLC). Persists session state per Google Analytics property. Lifetime: 2 years. Privacy and DPF status as above.

Our GA4 property is configured with IP anonymisation at intake, Google Signals disabled, and a 14-month retention window (shorter than the GA4 default of 26 months).

Preferences and Marketing

None currently deployed.

Record of consent

We keep a record of your consent (timestamp, banner version, consent string, pseudonymous identifier) for three (3) years following your last action, as evidence of the consent transaction (DPDPA section 6(3); GDPR Article 7(1)).

Accessibility

The cookie banner conforms to WCAG 2.2 AA: keyboard-navigable; screen-reader compatible with announced category state changes; colour-contrast at least 4.5:1 for text; not pointer-only; and not time-limited. See our Accessibility Statement for the broader site posture.

Audit cadence

We audit our cookies and similar technologies at least every six months. The last audit was 14 May 2026. The next audit is scheduled for November 2026.

Browser-level controls and DNT

Clearing cookies and storage in your browser will remove our consent record; the banner will reappear on your next visit. We honour Global Privacy Control (GPC) signals as a valid opt-out of sale and sharing under CCPA / CPRA; we treat browser-level Do Not Track signals as a request to refuse analytics cookies where technically feasible.

Changes to this Cookie Policy

We may update this Cookie Policy from time to time. Material changes will be flagged on the site, and the Last reviewed date below will be updated. Where a material change introduces a new category of cookie or a new tracking technology, your consent will be re-sought.

Related

For full details on how SMMARUN processes personal data, please see our Privacy Notice.