Cookies on ChainTwin

We use cookies to run the platform, improve your experience, and measure usage. You can accept all, reject non-essential, or customise your preferences. Cookie Policy

Privacy & Compliance

Cookie Policy

Aligned with the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19)

1. What are cookies?

Cookies are small text files stored in your browser when you visit ChainTwin. We use them to run the platform, remember your preferences, measure how visitors use the site, and — with your permission — for marketing attribution.

2. Categories we use

Strictly Necessary — always on: Required for the platform to function (login session, CSRF protection, language preference, security challenge, and the consent choice itself). Cannot be disabled.
Functional: Remember your shipment-wizard drafts, UI preferences, and last-used Incoterm / port so returning is faster.
Analytics: Anonymised usage measurement — how visitors move from signup → OTP → first shipment. Helps us improve the product.
Marketing: Conversion pixels for LEAP / Saudi Logistics Expo campaigns, retargeting, and UTM attribution so we can measure which channels bring new importers.

3. Full cookie list

The table below is generated automatically from our central cookie registry — anything new we set will appear here as soon as it ships.

Name	Category	Party	Duration	Purpose
`session_token`	Strictly Necessary	First-party	7 days	Signed JWT / opaque session token used to authenticate every API request.
`csrf_token`	Strictly Necessary	First-party	session	Cross-site request forgery protection for state-changing API calls.
`language`	Strictly Necessary	First-party	12 months	Stores your chosen UI language (ar / en / zh / hi).
`__cf_bm`	Strictly Necessary	Third-party	30 minutes	Cloudflare Turnstile / Bot Management — filters automated abuse.
`cf_clearance`	Strictly Necessary	Third-party	30 days	Cloudflare human-verification token issued after a successful challenge.
`ct_consent`	Strictly Necessary	First-party	12 months	Your cookie preferences — stored so we do not ask again on every visit.
`gate_ok`	Strictly Necessary	First-party	12 months	Private-beta access flag set after entering the invitation code.
`ct_wizard_draft`	Functional	First-party	30 days	Remembers unfinished shipment-wizard drafts so you can resume where you left off.
`ct_last_incoterm`	Functional	First-party	6 months	Pre-selects the Incoterm you used last so quoting is faster.
`ct_ui_prefs`	Functional	First-party	12 months	Sidebar collapsed/expanded state and other UI preferences.
`_ct_anon`	Analytics	First-party	12 months	Anonymous visitor ID used to measure the signup → OTP → first shipment funnel.
`_ct_session`	Analytics	First-party	session	Session-level pageview counter (no personal data).
`_ct_utm`	Marketing	First-party	90 days	Stores UTM parameters (leap, expo, google-ads, …) so we can attribute the source of new importers.
`_ct_retarget`	Marketing	Third-party	90 days	Ad-platform retargeting pixel — shows relevant ChainTwin ads to visitors who did not sign up.

4. Legal basis

Strictly-necessary cookies are used under the legitimate-interest basis of delivering the service. Functional, analytics, and marketing cookies require your explicit prior consent, as required by the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19).

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of any processing done before withdrawal.

5. Managing or withdrawing consent

You can update your choices at any time using the button below, from the "Cookie Settings" link in the site footer, or by clearing cookies directly in your browser.

6. Data-protection contact

For any privacy inquiry or to exercise your PDPL rights, contact us at:

privacy@chaintwin.com

In case of conflict between the Arabic and English versions of this policy, the Arabic text prevails.