Cookie Policy

Effective Date: September 21, 2025

1. Introduction

This Cookie Policy explains how Ironsmith.io ("we," "our," or "us") uses cookies and similar tracking technologies when you visit our websites and use our services. This policy provides detailed information about what cookies are, how we use them, the types of cookies we use, and how you can manage your cookie preferences.

This Cookie Policy is part of and should be read in conjunction with our Privacy Policy and Terms of Service.

2. What Are Cookies

Cookies are small text files that are placed on your computer or mobile device when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and provide information to website owners.

2.1 Types of Storage Technologies

• Cookies: Small text files stored in your browser
• Local Storage: Larger data storage in your browser for persistent data
• Session Storage: Temporary storage that expires when you close your browser
• IndexedDB: Browser database for storing structured data

2.2 Cookie Duration

• Session Cookies: Temporary cookies that expire when you close your browser
• Persistent Cookies: Cookies that remain on your device for a set period or until manually deleted

3. How We Use Cookies

We use cookies for the following purposes:

• Authentication: To identify you when you sign in and maintain your logged-in state
• Security: To enable security features and prevent fraud
• Preferences: To remember your settings and preferences
• Performance: To optimize the performance of our services
• Functionality: To provide features and functionality
• Analytics: To understand how our services are used (aggregate data only)

4. Types of Cookies We Use

4.1 Essential Cookies

These cookies are necessary for our services to function properly and cannot be disabled. They include:

• Authentication cookies
• Security cookies (CSRF protection)
• Load balancing cookies
• User session cookies

4.2 Functional Cookies

These cookies enable enhanced functionality and personalization:

• Language preferences
• Theme preferences (light/dark mode)
• User interface customizations

4.3 Performance Cookies

These cookies help us understand how our services perform:

• Page load time tracking
• Error reporting
• CDN optimization

5. Specific Cookies We Use

Cookie Name	Purpose	Type	Duration
auth-token	User authentication and session management	Essential	Session or 7 days
refresh-token	Secure token refresh for extended sessions	Essential	30 days
csrf-token	Cross-site request forgery protection	Essential	Session
theme-preference	User's theme selection (light/dark)	Functional	1 year
cloudfront-*	CDN performance optimization	Performance	Session
cognito-*	AWS Cognito authentication	Essential	Varies

6. Third-Party Cookies

We use trusted third-party services that may set their own cookies:

6.1 Amazon Web Services (AWS)

• Purpose: Infrastructure and authentication services
• Cookies: AWS Cognito authentication cookies, CloudFront CDN cookies
• Privacy Policy: AWS Privacy Policy

6.2 Stripe

• Purpose: Payment processing
• Cookies: Fraud prevention and payment session cookies
• Privacy Policy: Stripe Privacy Policy

6.3 CloudFront CDN

• Purpose: Content delivery and performance optimization
• Cookies: Cache management and geographic routing
• Privacy Policy: Part of AWS services

7. Managing Cookies

7.1 Browser Controls

Most web browsers allow you to control cookies through their settings. You can:

• View what cookies are stored on your device
• Delete some or all cookies
• Block all cookies or third-party cookies
• Set preferences for specific websites

7.2 Browser-Specific Instructions

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Privacy, search, and services → Cookies and site permissions

7.3 Impact of Disabling Cookies

Please note that disabling certain cookies may impact the functionality of our services:

• Essential Cookies: Disabling these will prevent you from signing in or using our services
• Functional Cookies: Your preferences won't be saved between sessions
• Performance Cookies: We won't be able to optimize your experience

7.4 Do Not Track

We respect Do Not Track (DNT) browser settings. When DNT is enabled, we limit cookie usage to essential cookies only.

9. Cookie Consent

9.1 Obtaining Consent

We obtain your consent for non-essential cookies through:

• Cookie consent banners on first visit
• Granular cookie preferences in account settings
• Clear information about cookie usage before setting them

9.2 Withdrawing Consent

You can withdraw your consent at any time by:

• Adjusting your cookie preferences in account settings
• Using browser controls to delete or block cookies
• Contacting us at privacy@ironsmith.io

9.3 Legal Basis

We set cookies based on:

• Legitimate Interest: Essential cookies necessary for service operation
• Consent: Non-essential cookies for enhanced functionality
• Contract: Cookies necessary to fulfill our service agreement

10. Updates to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:

• Updating the "Effective Date" at the top of this policy
• Posting a notice on our website
• Sending email notifications for significant changes

Your continued use of our services after changes constitutes acceptance of the updated policy.