This Cookie Policy explains how Singularity Data Limited ("Singularity Data", "we", "us") uses cookies and similar technologies on our websites and applications. It should be read together with our Privacy Policy.
Contact: info@singularitydata.io (FAO: James Henderson)

1. What are cookies and similar technologies?
   • Cookies are small text files placed on your device by a website. They can be "session" cookies (deleted when you close your browser) or "persistent" cookies (remain until they expire or are deleted).
   • Similar technologies include local storage, SDKs, pixels, and beacons that may store or access information on your device.

   Under UK law (UK GDPR and PECR), we must obtain your consent to store or access cookies on your device unless they are strictly necessary for the service you request.

2. How we use cookies today

   Right now, we only use strictly necessary cookies to support login and session management for registered users. We do not currently use analytics, advertising, or social media tracking cookies.

   If we introduce optional cookies in the future (for example, analytics for product improvement), we will update this policy, adjust our cookie banner and preferences centre, and ask for your consent before setting them.

3. Categories of cookies
   • Strictly necessary (essential) – Required to operate the site, provide secure login, prevent fraud, and remember your cookie choices. Legal basis: legitimate interests and/or performance of a contract.
     Consent not required under PECR.
   • Functional (optional) – Enhance functionality or personalisation.
     Legal basis: consent.
   • Analytics/measurement (optional) – Help us understand usage and improve features.
     Legal basis: consent.
   • Advertising/targeting (optional) – Deliver content/ads relevant to you.
     Legal basis: consent. (We do not use these at present.)
4. Cookies we set (current)

   We set only essential cookies for authentication and preference storage. Names may vary by environment.

   Name (example)	Purpose	Provider	Type	Expiry	Category
   sd_session	Maintains a user session after login and routes requests securely	Singularity Data	First‑party, session	End of session	Strictly necessary
   sd_auth	Persists authenticated state where you choose "remember me"	Singularity Data	First‑party, persistent	Up to 30 days	Strictly necessary
   sd_csrf	Helps protect against cross‑site request forgery	Singularity Data	First‑party, persistent	End of session	Strictly necessary
   cookie_consent	Stores your cookie preferences (so we don’t ask again each visit)	Singularity Data	First‑party, persistent	6–12 months	Strictly necessary

   Note: We may also maintain server logs (e.g., IP address, user agent) for security and operational purposes. These are not cookies and are handled under our Privacy Policy.

5. Potential future cookies (not active yet)

   If we add optional cookies, we will present clear choices in the banner/preferences centre. Example tools and what they would do:

   Category	Example tools	What they would collect	Retention	Consent required?
   Analytics/measurement	e.g., first‑party analytics or privacy‑centric analytics	Page views, feature usage, referrers, coarse location	13 months typical (or shorter)	Yes
   Functional	e.g., product tour/UX tools	In‑product tips state, dismissed banners	Until cleared or a set period	Yes
   Advertising/retargeting	n/a (not planned)	n/a	n/a	Yes

   We will not enable these without first updating this policy and collecting valid consent.

6. Managing your cookies
   • Cookie banner / preferences centre: You can accept or reject optional cookies at any time using Cookie Settings (link in footer or banner). Your choices take effect for the browser and device you use.
   • Browser controls: You can block or delete cookies via your browser settings. This may affect site functionality (e.g., login). See your browser’s help pages for instructions.
   • Do Not Track: Our site does not currently respond to DNT signals. We will review this as standards evolve.
7. Legal bases (UK GDPR & PECR)
   • Strictly necessary cookies – processed under legitimate interests and/or performance of a contract and do not require consent under PECR.
   • All other cookies – set only with your consent. You can withdraw consent at any time via Cookie Settings.
8. International transfers

   If any cookie-related data is processed outside the UK/EEA (for example, by a service provider), we will apply appropriate safeguards (e.g., IDTA/SCCs) as described in our Privacy Policy.

9. Changes to this policy

   We may update this policy to reflect changes in technology, law, or our practices. We will post the updated version with a new “Last updated” date, and for material changes we may notify you via banner or in‑product notice.

10. Contact

    Singularity Data Limited
    73G Warwick Square, London, SW1V 2AR, United Kingdom
    Email: info@singularitydata.io (FAO: James Henderson)