Legal

Cookie Policy

This policy explains the cookies and browser-storage technologies used by the Helmara website, including how preferences may be stored in your browser.

Effective date: Pending legal review Last updated: Draft — based on current site audit

1. About this policy

This Cookie Policy applies to the public Helmara website at www.helmara.ai (the static marketing site). It describes cookies and similar browser technologies used by that site as verified in the current implementation.

It does not automatically cover authentication or session technologies used inside the separate Helmara product application after you log in, unless a future audit expressly expands this policy’s scope.

For how Helmara processes personal information more broadly, see the Privacy Policy.

2. What cookies are

Cookies are small pieces of data that websites can store through the browser and send with later requests.

Websites can also use other browser technologies such as localStorage and sessionStorage. Those values are generally kept in the browser and are not automatically attached to every HTTP request the way cookies can be. This policy covers both cookies and similar storage where the Helmara website sets them.

3. How Helmara uses browser technologies

At the time of the current implementation audit, the public website uses first-party localStorage for appearance preference and one first-party functional cookie (helmara-language) set only after an explicit language-switch click, so a future edge geo default can respect that choice. Page language itself is still determined by the URL (/ vs /ar/), not by the cookie.

The site also loads limited third-party assets (fonts and an animation library) over the network. Those requests are for site presentation, not visitor analytics or advertising tracking on helmara.ai.

4. Technologies currently used

Verified inventory for the public SEO site:

Name Type Provider Purpose Duration Category
pp-color-mode localStorage Helmara (first-party) Remembers light or dark appearance preference Until cleared, replaced or browser data removed Functional
helmara-language HTTP cookie Helmara (first-party) Remembers an explicit English or Arabic language choice so automatic regional defaults do not override it Up to 1 year, or until cleared / replaced Functional

No sessionStorage or indexedDB usage was found. Page content language is selected via crawlable URLs (/ and /ar/). The helmara-language cookie does not translate pages; it only stores a manual preference after the language link is used. Deprecated pp-locale localStorage is not used.

5. Functional preferences

Appearance (pp-color-mode)

The theme toggle stores light or dark in localStorage under pp-color-mode so the site can keep your selected appearance on later visits. Default is light when no value is stored. Source: js/theme.js and the inline head script on each page.

Language (helmara-language)

English and Arabic are separate static URL trees. A crawlable language link switches between / and /ar/. When you use that link, the site sets a first-party cookie helmara-language to en or ar (Path=/, SameSite=Lax, Secure on HTTPS, max-age about one year) so an automatic regional language default cannot override your explicit choice. Source: js/locale.js. The site does not use pp-locale localStorage for language delivery.

6. Analytics technologies

At the time of this policy’s current implementation audit, the Helmara website does not load analytics cookies or analytics pixels (no Google Analytics, GTM, Plausible, PostHog, Mixpanel, Segment, Fathom, Amplitude or similar scripts were found in the static site).

This describes the current build. The site may change; check this page after material updates.

7. Advertising technologies

At the time of this audit, the public website does not load advertising or remarketing cookies or pixels (no Meta Pixel, Google Ads remarketing tags, LinkedIn Insight Tag, Hotjar, Microsoft Clarity or similar trackers were found).

Helmara’s Paid Ads product module (helping customers run Meta/Google campaigns inside the product) is separate from tracking visitors to www.helmara.ai and is not listed here as website advertising technology.

8. Third-party technologies

The public site currently loads:

  • Google Fonts — stylesheet/font files from fonts.googleapis.com / fonts.gstatic.com for typography.
  • GSAP (GreenSock) — animation scripts from cdnjs.cloudflare.com for shared entrance/scroll behaviour.

These are third-party network requests for assets. Exact cookie behaviour on those third-party domains is controlled by the providers, not by Helmara first-party code. No embeds (video, maps, chat widgets, CAPTCHA iframes) were found on the static pages.

Confirm whether counsel wants additional disclosure about third-party CDN/font request metadata, and whether self-hosting fonts/scripts is preferred.

9. Managing your preferences

You can change appearance with the site theme control. You can change language with the crawlable language link (English / العربية); that sets the helmara-language preference cookie.

There is currently no separate Cookie Settings / consent-management panel on the public site. Browsers also let you clear site data, including cookies and localStorage. Clearing site data may reset preferences such as theme and language preference.

Confirm jurisdictional consent requirements for the current inventory (first-party functional localStorage + first-party language preference cookie + third-party font/CDN assets) and whether a CMP or banner is required before publication.

10. Changes to this policy

This Cookie Policy may be updated when the website’s technologies or legal requirements change. When finalised, material updates will be reflected here with a revised effective / last-updated date.

11. Contact us

For product or website enquiries, use the Contact form. Related privacy information is in the Privacy Policy. Platform security overview: Security & Trust.

Insert a dedicated privacy/legal contact channel once the contracting entity confirms notice addresses.