What this policy covers

This Cookie Policy explains how SP Global (Pty) Ltd ("SP Global", "we", "us") uses cookies and similar technologies on the Deciphr websites and application (the "Service"). It should be read together with our Privacy Policy, which forms part of it and describes how we handle personal information more generally. By continuing to use the Service, or by accepting cookies through our consent banner where one is shown, you agree to the use of cookies as described here. Where the law requires your consent, we rely on the consent you give and not on your continued use alone.

What cookies and similar technologies are

A cookie is a small text file placed on your device when you visit a website. Cookies let a site recognize your device, remember your actions and preferences, keep you signed in, and operate securely. We also use technologies that work like cookies, and we refer to all of them in this policy as "cookies":

• Cookies: first-party (set by Deciphr) and, in limited cases, third-party (set by a provider that supports the Service).
• Local and session storage: browser storage used to hold small preferences such as your theme and language, and short-lived state.
• Pixels, tags, and SDKs: small pieces of code used to understand whether a page or message loaded correctly and how the Service is performing.

Cookies may be "session" cookies, which are deleted when you close your browser, or "persistent" cookies, which remain until they expire or you delete them.

The categories we use

We group cookies by purpose. The table below is representative and not exhaustive; specific cookies and their lifetimes may change as the Service evolves.

Strictly necessary cookies are required for the Service to function and cannot be switched off through our banner. If you block them in your browser, parts of the Service will not work.

Cookies we do not use

We do not use cookies to serve third-party advertising, to build advertising profiles about you, or to track you across unrelated websites or apps. We do not sell personal information, and we do not share cookie data with data brokers or advertising networks for their own purposes.

Your consent and choices

Where the law requires consent — including under the EU/UK ePrivacy rules, the GDPR, and South Africa's POPIA — we set non-essential cookies only after you accept them. You can:

• Accept or decline non-essential cookies through the consent banner when it is shown.
• Withdraw or change consent at any time; withdrawing consent is as easy as giving it and does not affect the lawfulness of processing carried out beforehand. Change your cookie choice.
• Reject non-essential cookies and still use the core Service, which relies only on strictly necessary cookies.

If we cannot show a banner for technical reasons, we set only strictly necessary cookies until you have had the opportunity to choose.

Managing cookies in your browser

You can control and delete cookies through your browser settings, and set your browser to warn you before accepting them. Most browsers let you block all cookies, block third-party cookies only, or clear cookies when you close the browser. Because strictly necessary cookies are essential, blocking all cookies may prevent you from signing in or using key features. Instructions are available in the help pages of Chrome, Safari, Firefox, and Edge.

Do Not Track and Global Privacy Control

Some browsers offer a "Do Not Track" (DNT) signal or a Global Privacy Control (GPC) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT signals. Where required by applicable law, we treat a recognized GPC signal as a valid request to opt out of non-essential and non-exempt cookies.

Third parties and sub-processors

Some cookies are set by providers that help us deliver the Service — for example, our identity and authentication provider, our hosting and content-delivery infrastructure, and, where enabled, an analytics provider. These providers act on our behalf under contract and may only process cookie data for the purposes we specify. Our use of sub-processors, and the safeguards that apply, are described in our Privacy Policy.

Google Analytics. We use Google Analytics on our public website only, never inside the app.

• It runs only after you click Accept.
• It sets cookies named _ga and _ga_* that last up to 24 months.
• Google sees your IP address, browser, device and the pages you visit.
• See How Google uses data when you use our partners’ sites or apps.

International transfers

Cookie data may be processed in countries other than your own, including where our providers operate. Where personal information is transferred internationally, we apply the safeguards described in our Privacy Policy, such as recognized transfer mechanisms and appropriate contractual protections.

Legal bases

We rely on the following legal bases for cookies: our legitimate interests (and, where applicable, the ePrivacy "strictly necessary" exemption) for essential and security cookies; and your consent for preferences and analytics cookies where consent is required. Under POPIA we process on the corresponding lawful grounds, including consent and legitimate interest, as set out in our Privacy Policy.

Retention

Session cookies are deleted when you close your browser. Persistent cookies last for the durations shown above, or until you delete them. We keep information derived from cookies no longer than necessary for the purposes described here or as required by law.

Changes to this policy

We may update this Cookie Policy from time to time to reflect changes in technology, law, or how we operate. When we make material changes we will update the "effective" date above and, where required, ask for your consent again. Your continued use of the Service after an update means you accept the revised policy to the extent permitted by law.

Contact

Questions about this Cookie Policy or your choices? Contact our privacy team through the contact form below. SP Global (Pty) Ltd is the party responsible for personal information processed through cookies on the Service.