1. Website Operator
This policy applies exclusively to enigmalabs.ee and www.enigmalabs.ee, operated by Enigma Labs OÜ, an Estonian private limited company.
| Company information | Details |
|---|---|
| Registry code | 17166408 |
| VAT number | EE102825316 |
| Registered address | Harju maakond, Tallinn, Kesklinna linnaosa, Juhkentali tn 8, 10132, Estonia |
| Contact | hello@enigmalab.io |
Read this policy together with our Privacy Policy. Cookies are small values stored by your browser and sent with relevant requests. Local storage holds values in your browser without automatically sending them on every request. Both may fall under rules governing storage of, or access to, information on your device.
2. Cookies and Browser Storage
The website uses c15t to record and apply your consent preferences.
| Name | Provider | Purpose | Duration and scope |
|---|---|---|---|
c15t cookie | Enigma Labs OÜ through c15t | Record the choice you make in the consent banner or settings dialog, including necessary information to apply that choice | Up to 365 days; first-party, host-only, SameSite=Lax, Secure on HTTPS |
c15t local-storage entry | Enigma Labs OÜ through c15t | Mirror the consent preference so it can be restored and respected | Browser storage has no automatic expiry; the entry remains until cleared or replaced, subject to the consent manager's validity checks |
Consent storage is necessary to remember and honour acceptance or refusal; it is not used for advertising. The cookie is not set until a consent choice is saved. Choices are stored separately for the apex and www host, so you may be asked again when visiting the other host or using another browser. Where a hosted c15t service is configured, consent information is also sent to that service, as described in the Privacy Policy.
Region selection: The Estonian legal entity is fixed by the domain. These domains do not need the geoDecision, region, userCountry or preferredLegalLanguage cookies used by other versions of the website. We do not create those cookies on this site and remove old values encountered during page requests. Browser timezone and language lists are not submitted for regional selection.
The current website application does not install Intercom, advertising cookies, marketing pixels or optional analytics scripts. The presence of a functionality category in the consent dialog does not itself load a third-party feature. If we introduce optional storage or tracking, we will identify it here and obtain consent before activating it where required.
3. Security and Hosting Services
Cloudflare Turnstile protects contact forms against automated abuse. It processes technical browser and request signals and generates a short-lived verification token. The token is submitted with the form and checked by our server; it is not a marketing identifier. The site application does not set a Turnstile cookie itself. Cloudflare may use browser mechanisms necessary to perform its security checks; see Cloudflare's privacy information.
Vercel and any configured network-security layer handle technical requests to deliver and protect the website. Request logs and server-side rate-limit counters are described in the Privacy Policy. They are distinct from the consent-preference cookie listed above.
4. Your Choices
Use Cookie Settings in the footer of any page to review your choices, accept optional categories, reject them, or change a previous choice. Refusing optional categories does not prevent you from reading the website or sending a legitimate enquiry. Necessary consent storage remains available to remember your refusal.
Optional features requiring consent must be inactive before consent. Consent must be an affirmative choice; merely browsing, scrolling or submitting an enquiry does not grant it. Withdrawing consent takes effect for future optional processing and does not affect processing lawfully carried out before withdrawal.
You can also delete cookies and site storage in your browser. To completely remove a saved c15t choice, clear both cookies and local storage for the relevant host; otherwise the remaining copy may restore it. Blocking all storage may cause the banner to reappear or prevent preferences from being remembered. Browser settings apply to each browser and device separately.
5. Legal Framework and Your Rights
We apply the EU ePrivacy Directive (2002/58/EC), Estonia's Electronic Communications Act (Elektroonilise side seadus), the GDPR (Regulation (EU) 2016/679) and Estonia's Personal Data Protection Act (Isikuandmete kaitse seadus).
Storage or access strictly necessary to deliver a service you request, including remembering your privacy choice and proportionate security checks, does not require cookie consent. Other storage or access requires prior informed consent where applicable. This device-storage rule is separate from the GDPR legal basis for processing personal data. Our Privacy Policy sets out those bases, including legitimate interests in security, legal obligations concerning consent records, and consent for optional features where applicable.
Where storage or security signals involve personal data, you have the applicable rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent described in the Privacy Policy. You may complain directly to Andmekaitse Inspektsioon (AKI), the Estonian Data Protection Inspectorate, at https://www.aki.ee, or another competent EU/EEA supervisory authority. Judicial remedies remain available.
6. Changes and Contact
We update this policy when our use of cookies or related technologies changes. Material changes requiring new consent will be presented before the relevant optional processing begins.
Contact Enigma Labs OÜ, registry code 17166408, VAT number EE102825316, at Harju maakond, Tallinn, Kesklinna linnaosa, Juhkentali tn 8, 10132, Estonia, or hello@enigmalab.io.
Related documents: Privacy Policy, Terms of Service, Data Processing Agreement.