Legal ledger / Cookies

Cookie Policy

The limited cookies and browser storage used to secure and operate Iktinah.

Effective: 5 August 2026Version: 2026-08-05

Current position. Iktinah uses essential authentication, security, and feature storage. It does not currently use advertising cookies or third-party behavioural tracking.

اقرأ بالعربية Print or save as PDF

01Our approach

Iktinah currently uses cookies and browser storage only where necessary to authenticate users, protect forms and sessions, remember security-sensitive workflow state, and provide features you request. We do not currently use advertising cookies or third-party behavioural tracking.

Because these technologies are necessary for a requested account service, they do not require an advertising-cookie banner. If we introduce optional analytics or marketing technology, we will update this policy and obtain consent where required before setting it.

02Cookies we use

Name or family	Purpose	Typical duration
`better-auth.session_token` or secure-prefixed equivalent	Maintains your signed-in session and lets protected pages recognise it.	Session lifetime or until sign-out/expiry
Better Auth temporary OAuth, state, and verification cookies	Prevents forged sign-in requests and completes a Google, ORCID, email, or account-security flow you start.	Short-lived; normally minutes
Cloudflare security cookies, when issued	Network security, bot detection, abuse prevention, and load management.	Varies by the security event; ordinarily short-lived

The exact secure prefix can differ between local development and HTTPS production. Session-cookie contents are opaque identifiers, not your password or full profile.

03Local storage and device data

The website or plugin may use local storage, IndexedDB, or plugin preferences to retain interface state, device registration, encrypted local workspace material, drafts, caches, and settings on your device. These mechanisms are not sent automatically to Amayx merely because they exist; network requests occur when you use an online feature.

Clearing site data can sign you out and remove unsynchronised preferences or local state. Export or sync anything important before clearing browser or plugin storage.

04Third-party components

Cloudflare may process request and security identifiers when traffic passes through its network. Google or ORCID can set their own cookies on their domains when you choose those sign-in methods. Tap can use necessary anti-fraud and checkout technologies when you open its secure payment flow. Those providers control cookies on their own sites under their notices.

05Your controls

You can block or delete cookies in your browser. Blocking essential authentication or security cookies will prevent sign-in and may break account, checkout, or support features. You can sign out to invalidate the active application session and use account settings to revoke registered devices.

Global Privacy Control and Do Not Track signals do not change advertising behaviour because Iktinah does not currently run behavioural advertising. We will reassess this if our practices change.

06Changes and contact

We update this policy when our technologies or legal duties change. Material optional-cookie changes will be reflected in consent controls before they are activated where required.

Questions: [email protected]. For the wider handling of personal data, read the Privacy Policy.