Cookie Policy

Effective Date: January 1, 2025 Last Updated: January 1, 2025

1. Introduction

This Cookie Policy explains how Eternity Wave ("we", "us", or "our") uses cookies and similar tracking technologies when you visit our website and use our digital legacy preservation service (the "Service").

This policy should be read in conjunction with our Privacy Policy and Terms of Service.

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. Cookies are widely used to make websites work more efficiently and provide information to website owners.

2.1 Types of Cookies by Duration

• Session Cookies: Temporary cookies that expire when you close your browser
• Persistent Cookies: Cookies that remain on your device for a set period or until you delete them

2.2 Types of Cookies by Origin

• First-Party Cookies: Set by us (Eternity Wave) directly
• Third-Party Cookies: Set by external services we use (e.g., payment processors, analytics providers)

3. How We Use Cookies

We use cookies for the following purposes:

3.1 Essential Cookies (Strictly Necessary)

Legal Basis: Contractual necessity and legitimate interests (GDPR Art. 6(1)(b) and (f))

No Consent Required: These cookies are essential for the Service to function and cannot be disabled.

Purpose:

• Authentication: Keep you logged into your account securely
• Security: Protect against fraudulent activity and unauthorized access
• Session Management: Maintain your session state across pages
• Load Balancing: Distribute traffic across our servers

Examples:

• session_id: Your unique session identifier
• auth_token: Authentication token for secure login
• csrf_token: Cross-site request forgery protection
• __Secure-next-auth.session-token: NextAuth.js session cookie

Retention: Session cookies (deleted when browser closes) or up to 30 days

3.2 Functional Cookies (Enhancement)

Legal Basis: Consent (GDPR Art. 6(1)(a))

Consent Required: Yes - You can enable/disable these cookies

Purpose:

• Preferences: Remember your settings and choices
• Language: Store your preferred language selection
• UI State: Remember interface customizations
• Feature Access: Enable optional enhanced features

Examples:

• preferred_language: Your language preference (en/hu)
• cookie_consent: Your cookie preference choices
• dashboard_layout: Your dashboard customization preferences
• theme_preference: Light/dark mode preference (if implemented)

Retention: Up to 12 months

3.3 Analytics Cookies (Performance)

Legal Basis: Consent (GDPR Art. 6(1)(a))

Consent Required: Yes - You can enable/disable these cookies

Purpose:

• Usage Analysis: Understand how users interact with the Service
• Performance Monitoring: Identify technical issues and optimize performance
• Feature Usage: Determine which features are most valuable
• Error Tracking: Detect and diagnose errors

We DO NOT currently use analytics cookies, but may implement them in the future. You will be asked for consent before any analytics cookies are deployed.

Future Examples (if implemented):

• Google Analytics cookies (if implemented)
• Custom analytics tracking (if implemented)

Retention: If implemented, up to 24 months

3.4 Marketing Cookies (Targeting/Advertising)

Legal Basis: Consent (GDPR Art. 6(1)(a))

Consent Required: Yes - You can enable/disable these cookies

Purpose:

• Personalized Advertising: Show relevant ads based on your interests (if implemented)
• Retargeting: Display ads to users who visited our site (if implemented)
• Conversion Tracking: Measure advertising campaign effectiveness (if implemented)

We DO NOT currently use marketing cookies. If we implement marketing features in the future, you will be explicitly asked for consent.

Retention: If implemented, up to 24 months

4. Third-Party Cookies

We use trusted third-party services that may set their own cookies:

4.1 Payment Processing (Stripe)

Purpose: Secure payment processing for subscriptions

Cookies Set:

• Stripe session cookies for payment security
• Fraud detection and prevention cookies

More Information: https://stripe.com/cookies-policy/legal

Control: Essential for payment processing - cannot be disabled if making payments

4.2 Email Service (Resend)

Purpose: Sending transactional and notification emails

Cookies: Resend does not set cookies on your browser. Email tracking pixels may be used for delivery confirmation.

More Information: https://resend.com/privacy

4.3 Hosting Provider (Vercel)

Purpose: Application hosting and delivery

Cookies: Minimal technical cookies for traffic routing and performance

More Information: https://vercel.com/legal/privacy-policy

Control: Essential for service delivery - cannot be disabled

4.4 File Storage (AWS S3)

Purpose: Secure storage of your uploaded files

Cookies: AWS does not set cookies through our S3 integration

More Information: https://aws.amazon.com/privacy/

5. Cookie Management and Your Choices

5.1 Our Cookie Consent Banner

When you first visit our website, you will see a cookie consent banner with the following options:

• Accept All: Consent to all cookie categories
• Reject All: Decline all non-essential cookies
• Customize: Choose specific cookie categories

You can change your cookie preferences at any time using the Cookie Settings button (floating icon on the bottom-left of the screen).

5.2 Browser Controls

Most browsers allow you to:

• View cookies stored on your device
• Delete cookies
• Block cookies entirely
• Receive warnings before cookies are set

How to Manage Cookies in Popular Browsers:

Google Chrome:

1. Settings > Privacy and security > Cookies and other site data
2. Choose your preferred option

Mozilla Firefox:

1. Settings > Privacy & Security
2. Under "Cookies and Site Data", customize settings

Safari:

1. Preferences > Privacy
2. Manage cookie settings

Microsoft Edge:

1. Settings > Cookies and site permissions
2. Manage cookies

IMPORTANT: Blocking essential cookies will prevent the Service from functioning properly. You will not be able to log in or access your account.

5.3 Mobile Device Controls

iOS (iPhone/iPad): Settings > Safari > Block All Cookies

Android: Settings > Site settings > Cookies (varies by browser)

5.4 Do Not Track (DNT)

We do not currently respond to Do Not Track (DNT) browser signals, as there is no industry-wide standard for DNT compliance. However, you can control cookies using the methods described above.

6. Cookie Details and Lifespan

6.1 Essential Cookies

6.2 Functional Cookies

6.3 Analytics Cookies (Not Currently Used)

We do not currently deploy analytics cookies. This section will be updated if we implement analytics in the future.

6.4 Marketing Cookies (Not Currently Used)

We do not currently deploy marketing cookies. This section will be updated if we implement marketing features in the future.

7. Similar Technologies

In addition to cookies, we may use other similar technologies:

7.1 Local Storage

We use browser local storage to:

• Store cookie preference selections
• Cache non-sensitive application data for performance
• Store UI state preferences

Control: You can clear local storage through your browser's developer tools or by clearing browsing data.

7.2 Session Storage

We use session storage for:

• Temporary data that expires when you close your browser
• Form data to prevent loss during navigation

Control: Automatically cleared when you close your browser.

7.3 Web Beacons / Tracking Pixels

Email Tracking: We may use tracking pixels in emails to:

• Confirm email delivery
• Track email open rates
• Measure engagement with email content

Control: Most email clients allow you to block images, which prevents tracking pixels from loading.

8. Data Protection and Privacy

8.1 Information Collected

Cookies may collect the following information:

• IP address (anonymized where possible)
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Referring website
• Click patterns and navigation paths

8.2 Data Security

Cookie data is:

• Transmitted securely using HTTPS encryption
• Stored securely with access controls
• Retained only for the necessary duration
• Protected according to our Privacy Policy

8.3 Data Sharing

We do NOT sell cookie data to third parties.

Cookie data may be shared with:

• Third-party service providers (as described in Section 4)
• Law enforcement if legally required
• Business successors in case of merger or acquisition

9. International Data Transfers

Cookie data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our hosting provider (Vercel) and payment processor (Stripe) operate.

We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses (SCCs)
• Service provider guarantees of GDPR compliance
• Adequacy decisions where applicable

10. Children's Privacy

Our Service is not directed to children under 16 years of age. We do not knowingly collect information from children through cookies.

If you believe we have collected cookie data from a child under 16 without parental consent, contact us immediately at privacy@eternitywave.com.

11. Updates to This Cookie Policy

We may update this Cookie Policy periodically to reflect changes in:

• Our cookie practices
• Legal or regulatory requirements
• Technology changes
• New features or services

When we make material changes:

• We update the "Last Updated" date
• We notify you via email or prominent website notice
• Continued use after changes constitutes acceptance

12. Your Rights Under GDPR

As an EU resident, you have the following rights regarding cookie data:

12.1 Right to Access

Request information about cookies stored on your device and data collected.

12.2 Right to Deletion

Request deletion of cookie data (subject to legal obligations).

12.3 Right to Object

Object to the use of non-essential cookies.

12.4 Right to Withdraw Consent

Withdraw consent for non-essential cookies at any time via Cookie Settings.

12.5 Right to Lodge a Complaint

File a complaint with your national data protection authority if you believe your rights have been violated.

13. Contact Us

For questions about our cookie practices:

Email: privacy@eternitywave.com Subject Line: "Cookie Policy Inquiry"

For general inquiries: Email: support@eternitywave.com

14. Additional Resources

ePrivacy Directive: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058

GDPR Information: https://gdpr.eu/cookies/

Your Online Choices (Advertising): https://www.youronlinechoices.com/

Network Advertising Initiative (NAI): https://www.networkadvertising.org/choices/

15. Summary

Current Cookie Usage:

• ✅ Essential Cookies: YES (required for service functionality)
• ✅ Functional Cookies: YES (with your consent)
• ❌ Analytics Cookies: NO (not currently used)
• ❌ Marketing Cookies: NO (not currently used)

Your Control:

• Essential cookies cannot be disabled (required for login and security)
• Functional, Analytics, and Marketing cookies require your consent
• You can change preferences anytime via Cookie Settings button
• Browser settings provide additional control options

Data Protection:

• All data encrypted in transit (HTTPS)
• Minimal data collection principle
• No selling of cookie data
• Full GDPR compliance

Acknowledgment: By using Eternity Wave, you acknowledge that you have read and understood this Cookie Policy and agree to our use of cookies as described herein.

Last Updated: January 1, 2025 Version: 1.0