Website Cookie Policy

1. Purpose and scope

This Cookie Policy explains how Guanta, Inc. ("Guanta", "we", "us", or "our") uses cookies and similar browser technologies on the public website at guanta.ai and the Guanta sign-in portal at portal.guanta.ai.

The public website and portal are described separately below. Customer tenant environments and third-party websites may use different technologies and remain subject to their own notices and applicable agreements. Requiring login does not itself exempt nonessential cookies or similar tracking from consent requirements; their purposes and use must be assessed for each environment.

2. What cookies and similar technologies are

Cookies are small text files that a website may ask a browser to store on a device. Cookies can support necessary website functions, remember preferences, measure use, or enable advertising, depending on their purpose and configuration.

Browser local storage is a separate mechanism that allows a website to retain information in the browser. Unlike a cookie, local-storage information is not automatically sent with each request to a website.

3. Current use on the Guanta website

The public Guanta website does not currently use cookies for:

• analytics or audience measurement;
• advertising or behavioral profiling;
• retargeting;
• cross-site tracking;
• embedded chat widgets; or
• social-media tracking pixels.

Guanta does not currently set non-essential cookies on the public website and therefore does not currently present a cookie-consent banner there.

The website uses browser local storage under guanta-theme only to remember a theme preference the visitor selects, such as dark, light, or system mode. An initial visit does not store a default preference. The selection remains until it is changed or the visitor clears site data; browser storage limits may remove it sooner. This preference remains in the visitor's browser and is not sent to Guanta as a cookie. It is not used to identify the visitor or track activity across websites.

4. Cookies on the sign-in portal

The portal uses first-party cookies set by Guanta for the requested sign-in and security functions. It does not use analytics, advertising, retargeting or cross-site tracking cookies.

• classis-portal-session maintains the sign-in session and information needed to complete authentication and security checks. It is a browser-session cookie, with no persistent expiry date. The server-side session has a 120-minute inactivity lifetime, and stricter account security limits may end access sooner. Browsers that restore a previous session may also restore session cookies.
• XSRF-TOKEN helps protect forms and requests against cross-site request forgery. It is also a browser-session cookie, with no persistent expiry date; the browser may restore it when restoring a session.
• classis_login_return preserves the page you requested while you complete sign-in, including when the sign-in page expires and needs refreshing. It contains an opaque reference, does not sign you in or satisfy MFA, and expires at most eight hours after the original sign-in handoff. Refreshing does not extend that time. The cookie is removed when the return is completed.

The session, request-security and sign-in return cookies are strictly necessary to provide and protect the sign-in service requested by the user. Where EU and Spanish cookie rules apply, these uses rely on the strictly necessary exception under Article 5(3) of the ePrivacy Directive and Article 22.2 of the Spanish LSSI, rather than consent.

The portal does not offer a persistent remembered-login option or issue new remember_* authentication cookies. Cookies issued by the former Remember me feature are no longer accepted for sign-in and are removed when presented to the portal. Existing valid sessions are preserved. Sign out to end your sign-in; closing the browser alone may not end it because browsers can restore session cookies. The portal cookie notice is informational: “Got it” dismisses the notice but does not record consent or enable another category of cookies. Cookie details remain available through the Cookies link, including before sign-in.

5. Other storage on the portal

The portal also uses browser local storage for:

• the theme preference, retained until changed or cleared;
• interactive-session-policy-sync, which coordinates session-security notices between tabs and retains the latest event until replaced or cleared; and
• guanta.portal.cookie-notice.v2, which remembers dismissal of the informational notice for 180 days. After that period the notice is shown again; the stored timestamp may remain until replaced or site data is cleared.

The former guanta.portal.cookie-notice.v1 dismissal is no longer used and is removed when the updated notice is dismissed.

These entries are scoped by the browser to the portal origin and are not used for analytics, advertising or tracking across websites. Clearing them resets the corresponding local preference or notice state. Browser settings may prevent storage or remove it sooner.

6. Hosting and technical operation

The public website is hosted through Cloudflare. Cloudflare may process technical request information needed to deliver and protect the website, such as IP address, request headers, timestamps, and security signals. This operational processing is described in Guanta's Website Privacy Policy.

Guanta does not use this hosting relationship to place analytics, advertising, or retargeting cookies on the public website. If a strictly necessary security or delivery mechanism is introduced by Guanta or its hosting provider, Guanta will assess and document it and update this policy where appropriate.

7. Third-party content and links

The public website does not currently embed third-party analytics, advertising pixels, social-media widgets, or chat tools that set cookies for visitors.

The website may contain ordinary links to third-party websites. Following a link takes the visitor to a separate service whose operator may use cookies or similar technologies under its own policies. Guanta does not control those third-party technologies.

8. Managing browser information

Visitors can remove the website theme preference by clearing site data or local storage for guanta.ai in their browser settings. Portal cookies and local storage can be managed separately for portal.guanta.ai. Clearing it may reset the website to the default or system theme.

Browsers also provide controls to view, block, or delete cookies. Because the public Guanta website does not currently rely on non-essential cookies, blocking cookies should not affect its ordinary public content. Blocking portal sign-in or request-security cookies may prevent login or other portal functions. Browser settings and instructions vary by browser and version.

9. Future changes and consent

Before introducing a non-essential cookie or similar tracking technology, Guanta will:

1. identify and document the technology, provider, purpose, data involved, and duration;
2. assess the applicable privacy and electronic-communications requirements;
3. update the relevant processing and vendor records;
4. update this policy and the Website Privacy Policy where necessary; and
5. implement notice, choice, and consent controls before activation where required by law.

Guanta will not treat continued browsing, silence, or inactivity as consent where affirmative consent is legally required.

10. Contact

Questions about this policy or Guanta's use of browser technologies may be sent to privacy@guanta.ai.

Guanta, Inc. 3723 Greenville Ave STE 44679 Dallas, TX 75206 United States

11. Policy review

Guanta reviews this policy at least annually and when the website, portal, cookie lifetimes, browser storage, hosting arrangement, embedded services, or applicable legal requirements change. The published version will show its effective date.