Cookies, kept to the essentials

01 Introduction

This Cookie Policy explains how Webority Technologies Private Limited (CIN: U72900HR2019PTC079747) ("Lumex^™", "we", "us") uses cookies and similar technologies on the Lumex^™ website and application. It is an electronic record under the Information Technology Act, 2000 and should be read alongside our Privacy Policy. Strictly necessary cookies are always on. In the European Economic Area, the United Kingdom and Switzerland, every other cookie stays off until you opt in, and the same applies if we cannot tell your country. Everywhere else, Google Analytics, Microsoft Clarity and PostHog are on by default, and you can turn them off at any time. Marketing stays off until you choose it. A choice you save always wins over these defaults, wherever you are. You can change or withdraw your choice at any time from cookie settings.

02 What are cookies

Cookies are small text files a website stores on your device so it can work properly, remember your preferences, and understand how the site is used. Similar technologies include local storage and pixels. Cookies may be "session" cookies, which are deleted when you close your browser, or "persistent" cookies, which stay until they expire or you remove them.

03 How we use cookies

We use strictly-necessary cookies to keep you signed in, keep the site working and remember your cookie choice. We also use analytics cookies to understand how the site is used, through Google Analytics 4, Google Tag Manager, Microsoft Clarity and PostHog. A cookie banner lets you accept or reject these non-essential cookies, and you can change your choice at any time. We do not use cookies to build advertising profiles or to track you across unrelated websites.

04 Types of cookies we use

• Strictly necessary: keep you signed in and the site secure and working. On by default; the site cannot function without them. When you chat with Lumi on this website, one of them keeps your chat together so Lumi remembers what you said. It is deleted when you close your browser. Another one, wui_region, records whether your connection is in the EEA, the UK or Switzerland (value eea) or elsewhere (value other). Our network edge, Cloudflare, reads the country of your connection and sets it for one day. It holds no identifier, and it decides only which cookie defaults apply. A third, webority_cookie_consent, remembers the cookie choice you save, so we do not ask again on every page. It keeps your choice for one year.
• Preferences: we set no preference cookies.
• Analytics: we measure how the site is used through Google Analytics 4, Google Tag Manager, Microsoft Clarity and PostHog. Google Tag Manager loads for every visitor and sets no cookies of its own. In the EEA, the UK and Switzerland, Google Analytics, Microsoft Clarity and PostHog cookies stay off until you opt in. Elsewhere, all three are on by default. With analytics on, PostHog sets one cookie, ph_<key>_posthog (the key is our PostHog project key), on lumex.zone and its subdomains for up to one year, and keeps a copy of the same record under that name in your browser's local storage. It holds a random id for your browser and your current visit. Because the portal shares it, your website visits before you sign in join your portal account when you sign in. With analytics off, PostHog still counts page views, clicks and scrolling for heatmaps, and page errors, but sets no cookie, stores nothing in your browser and records no replay. A choice you save always wins over this default. You can turn analytics off at any time from the Cookie settings link in the footer. We also use Ahrefs, a privacy-first analytics tool that is cookieless and sets no cookies.
• Marketing: we run no advertising, and this category sets no cookies. Marketing stays off until you choose it, in every region. With marketing on, your browser remembers which campaign or website brought you to us, in its own local storage. It keeps the first one for 90 days. With marketing off, it keeps this only until you close the tab.

05 Cookies we do not use

We use no advertising cookies and no cross-site or third-party tracking cookies. Cookie data is not sold or shared for marketing. Google's advertising signals (ad storage, ad user data and ad personalisation) are always denied on this website and in the customer portal, whatever you choose.

06 Managing your cookies

When you first visit Lumex^™, a cookie consent banner lets you accept all cookies, reject all non-essential cookies, or choose by category. Your choice is saved, and you can change it at any time from the Cookie settings link in the footer of every page. In the European Economic Area, the United Kingdom and Switzerland, non-essential cookies stay off until you opt in, and the same applies if we cannot tell your country. Elsewhere, Google Analytics, Microsoft Clarity and PostHog are on by default until you turn them off. Marketing stays off until you choose it. A choice you save always wins over the regional default. You also remain in full control through your browser settings. Chrome, Firefox, Safari and Edge all let you view, block or delete cookies. Blocking strictly-necessary cookies may stop parts of the site from working.

07 Third-party services

Some cookies are set by trusted providers we use to run the service and, under your cookie choice, to measure how it is used:

• Google Analytics 4 and Google Tag Manager (Google): site usage analytics and tag management. Tag Manager loads for every visitor. Google Analytics runs inside it under Google Consent Mode. In the EEA, the UK and Switzerland, it sets no cookies until you accept analytics cookies. Elsewhere, it is on by default until you turn it off.
• Microsoft Clarity (Microsoft): product analytics and session insights, loaded on this website only after you accept analytics cookies in the EEA, the UK and Switzerland. Elsewhere, it is on by default until you turn it off.
• PostHog (PostHog): website and product analytics, on this website and in the signed-in customer portal. It reaches PostHog through our own address, lumex.zone/ingest. On this website, it records the pages you visit, where you came from and the actions we measure, such as starting a free trial, downloading a sample report, using a free tool or booking a demo. It never records what you type into a form or a chat. In the EEA, the UK and Switzerland, it sets its cookie only after you accept analytics cookies. Elsewhere, it is on by default until you turn it off. In the portal, it also records how you use the product, linked to your user account. Without analytics consent, it still counts page views and product events, but sets no cookies, stores nothing in your browser and builds no user profile. With your analytics consent, it also records a replay of your visit. Every input and every piece of text is hidden in your browser before the replay is sent, and replays are kept for 30 days. When a page meets an error, PostHog receives the error and the page address, with sign in codes and links removed, so we can fix it.
• Ahrefs Web Analytics: cookieless, so it sets no cookies and stores no identifiers on your device.
• Google Maps (Google): the Contact page can show a map of our office. The map loads only when you choose Show the map, and then Google receives your IP address and may set its own cookies.
• Google reCAPTCHA (Google): when you send a form or a chat message, reCAPTCHA checks that it comes from a person. Google receives your IP address and browser details and may set its own cookies.
• Our payment provider may set cookies during checkout to process your payment securely.

These providers operate under written data-processing arrangements, and their handling of data is described in our Privacy Policy.

08 Measuring our emails

The links in our emails carry campaign tags, such as utm_source=email, so our analytics can tell a visit from an email apart from other visits. The tags hold the name of the email, never who you are.

Our account lifecycle emails, such as onboarding tips and reminders, and our marketing emails measure whether you open them and which links you click. A tiny image in the email, a tracking pixel, tells our email provider SendGrid when the email is opened. Each link first passes through a SendGrid address that records the click, then takes you to the page. We use this to see which emails help and to send fewer that do not.

Security emails are never measured. Sign in codes, password resets, email verification and other security messages carry no tracking pixel and no tracked links.

To stop this measurement, use the unsubscribe link at the foot of any lifecycle or marketing email, and we stop sending them to you. You can also turn off remote images in your email app, which stops the open pixel loading.

09 Changes

We may update this Cookie Policy from time to time. We give at least 15 days' notice before any material change takes effect.

10 Contact