01 What cookies are
Cookies are small text files a website stores on your device. Related technologies do the same job by other means — localStorage, for instance, keeps a value in your browser without sending it back to the server on every request. This policy covers both, because the rules that apply do not depend on which mechanism is used.
Cookies set by us are called first-party. Cookies set by a service we embed are third-party. Some last only until you close the tab; others persist for a defined period.
02 Your consent
Nothing beyond what is strictly necessary loads until you agree. When you first visit aidalabs.io you are asked to choose, and until you do, no analytics or marketing script is loaded at all — not loaded and disabled, but never fetched.
You can change your mind at any time through Cookie settings in the footer of every page. Declining costs you nothing: every part of this site works the same either way.
We do not use a cookie wall. The site is fully readable whether you accept or decline, because consent that is a condition of entry is not freely given.
03 Strictly necessary
Required for the site to work and to remember the choice you made. These do not require consent, because without them we could not honour a refusal.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| aida.consent.v1 | localStorage | Aida Labs | Stores your cookie choice. Never sent to our server — it stays in your browser. | Until you clear browser data |
04 Analytics
Set only with your consent. Used to understand which pages are read and how people arrive, so we can improve the site.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| _ga | Cookie | Google Analytics | Distinguishes one browser from another | 2 years |
| _ga_N2VNXRHZZM | Cookie | Google Analytics | Maintains session state for this property | 2 years |
05 Marketing
Set only with your consent. Used to recognise a returning visitor, to connect a form submission to the pages that preceded it, and to estimate which organisation a visit comes from.
| Name | Type | Provider | Purpose | Duration |
|---|---|---|---|---|
| hubspotutk | Cookie | HubSpot | Identifies a browser, and deduplicates contacts when a form is submitted | 6 months |
| __hstc | Cookie | HubSpot | Records first, last and current visit, and a visit count | 6 months |
| __hssc | Cookie | HubSpot | Tracks the current session | 30 minutes |
| __hssrc | Cookie | HubSpot | Detects whether the browser was restarted | Session |
| apolloAnonId | localStorage | Apollo | A random identifier for this browser, so repeat visits are recognised as the same visitor | Until you clear browser data |
| 6aa807dc8251db001f831cb2_canTrack | localStorage | Apollo | Caches whether contact-level tracking is permitted. On this site the value is false. | 7 days |
| 6aa807dc8251db001f831cb2_eventQueue | localStorage | Apollo | Holds page views that have not yet been sent to Apollo | Until you clear browser data |
On Apollo specifically. Apollo estimates which organisation a visit appears to come from, by looking up the IP address. We have deliberately switched off their contact-level tracking, so we do not use Apollo to identify you as an individual.
Their canTrack value reads false in your own browser, which is that setting seen from your side.
An IP address is still personal data, and Apollo does keep an identifier in your browser, which is why this sits behind consent like everything else in this section.
06 Third parties and international transfers
Where you consent, data collected through the cookies above is processed by:
- Google LLC — Google Analytics. United States.
- HubSpot, Inc. — CRM and visitor tracking. United States, with EU data hosting for this account.
- Apollo.io — organisation lookup. United States.
A transfer outside the EEA needs a safeguard under Chapter V of the GDPR — either the EU–U.S. Data Privacy Framework, which a provider certifies to, or the European Commission's Standard Contractual Clauses, which form part of the data processing agreement we hold with them. Our Privacy Policy covers this in more detail.
Separately from cookies, this site is served through Cloudflare, which processes request data including IP addresses in order to deliver pages and protect against abuse. That happens for every visitor, with or without consent, because a page cannot be delivered without it. See our Privacy Policy.
07 Legal basis
Storing or reading information on your device for anything other than what is strictly necessary requires consent under the Swedish Electronic Communications Act (lag [2022:482] om elektronisk kommunikation).
Where that data is also personal data, the legal basis under the GDPR is your consent, Article 6(1)(a).
08 Your rights
Where cookie data is personal data, you have the right to access it, have it corrected or erased, restrict or object to how it is processed, and receive it in a portable form.
To exercise any of these, write to privacy@aidalabs.io. You also have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, at imy.se.
09 Managing cookies in your browser
Every browser can block or delete cookies through its own settings, independently of the choice you make here. Blocking strictly necessary storage may mean the site cannot remember that you declined, and asks again on every visit.
10 Changes to this policy
We update this policy when what we load changes. The date at the top of the page is the last revision. Material changes reset your consent, so you will be asked again.
Newox Group AB, org. no. 559318-6280, Sjömärkesvägen 30, 423 39 Torslanda, Sweden.