Cookie Policy
Last updated: 29 July 2026
Controller: DataDiwan, Y-tunnus 3641767-6, Pakkamestarinkatu 1 F 94, 00520 Helsinki, Finland
Contact: info@datadiwan.com · support@datadiwan.com
1. What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help the site recognize your device and store certain information about your preferences or past actions.
We also use similar technologies such as local storage, session storage, and web beacons ("Tracking Technologies").
This Cookie Policy complies with:
- EU Directive 2002/58/EC (ePrivacy Directive) as implemented in Finnish law
- EU Regulation 2016/679 (GDPR)
- Finnish Information Society Code (Laki sähköisen viestinnän palveluista 917/2014, Chapter 20)
See also our Privacy Policy.
2. How We Use Cookies
We use cookies to:
- Ensure the Service functions correctly (essential cookies)
- Remember your preferences and settings (functional cookies)
Currently, we do not use analytics or marketing cookies. If we introduce them in the future, we will request your explicit consent before activation and update this Policy accordingly.
3. Types of Cookies We Use
3.1 Essential (Strictly Necessary) Cookies
These cookies are necessary for the Service to function. They cannot be disabled in our systems. They are usually set only in response to actions you take, such as setting privacy preferences, logging in, or filling forms.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
session_id | DataDiwan | Maintains your login session | Session |
csrf_token | DataDiwan | Security: prevents cross-site request forgery | Session |
auth_token | DataDiwan | Authenticates your account | 7 days |
cookie_consent | DataDiwan | Stores your cookie consent preferences | 1 year |
Legal basis: Legitimate interest / contract performance (Art. 6(1)(b) and (f) GDPR). No consent required.
3.2 Functional Cookies
These cookies enable enhanced functionality and personalization, such as remembering your language preference or dashboard layout.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
language | DataDiwan | Stores your selected language (EN/AR/FI) | 1 year |
theme | DataDiwan | Stores UI theme preference | 1 year |
dashboard_layout | DataDiwan | Remembers widget arrangement | 30 days |
Legal basis: Consent (Art. 6(1)(a) GDPR). You can opt out via cookie settings.
3.3 Analytics Cookies (Not Currently Used)
We do not currently use analytics cookies. If we introduce them in the future (e.g., Google Analytics, Plausible), we will:
- Update this Policy
- Request your explicit consent via the cookie banner
- Provide an opt-out mechanism
3.4 Marketing Cookies (Not Currently Used)
We do not currently use marketing or advertising cookies. If we introduce them in the future (e.g., Meta Pixel, LinkedIn Insight Tag), we will:
- Update this Policy
- Request your explicit consent via the cookie banner
- Provide an opt-out mechanism
4. Third-Party Cookies
Currently, the only third-party cookies are those set by our authentication provider:
| Third Party | Purpose | Privacy Policy |
|---|---|---|
| Google (OAuth) | Authentication via Google Sign-In | https://policies.google.com/privacy |
| Stripe | Payment processing fraud prevention | https://stripe.com/privacy |
We do not use analytics or advertising cookies from third parties at this time.
5. Cookie Consent Management
5.1 Consent Banner
When you first visit our website, a cookie banner appears allowing you to:
- Accept all cookies (essential + functional)
- Reject non-essential cookies (only essential cookies will be used)
- Customize preferences (select specific cookie categories)
5.2 Withdrawing Consent
You can change your cookie preferences at any time by:
- Clicking "Cookie Settings" in the website footer
- Adjusting your browser settings to block cookies
Note: Blocking essential cookies will prevent the Service from functioning correctly.
5.3 Browser Controls
Most browsers allow you to:
- See what cookies you have and delete them individually
- Block third-party cookies
- Block cookies from specific sites
- Block all cookies
- Delete all cookies when you close your browser
6. Data Transfers
Any third-party cookies (currently Google OAuth and Stripe) may process data outside the EEA. We ensure appropriate safeguards (Standard Contractual Clauses where applicable) are in place for such transfers.
7. Retention
| Cookie Type | Retention Period |
|---|---|
| Essential | Session to 1 year |
| Functional | 30 days to 1 year |
| Analytics | Not currently used |
| Marketing | Not currently used |
8. Changes to This Policy
We may update this Cookie Policy to reflect changes in the cookies we use or for legal compliance. Updates will be posted on this page with a revised "Last updated" date. Material changes will be notified via the cookie banner.
9. Contact
For questions about this Cookie Policy, contact:
Email: info@datadiwan.com · support@datadiwan.com
Postal: DataDiwan, Pakkamestarinkatu 1 F 94, 00520 Helsinki, Finland
You may also contact the Finnish Data Protection Ombudsman:
PL 800, 00531 Helsinki | tietosuoja@om.fi | +358 29 56 66700