1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the site function, remember preferences, and understand usage. Similar technologies (localStorage, sessionStorage, tracking pixels) are covered by this policy.
This Policy applies to Haqeeba Tech Limited and complies with DIFC Data Protection Law No. 5 of 2020 (DP Law 2020) and the UAE Telecommunications and Digital Government Regulatory Authority (TDRA) guidelines.
2. Categories We Use
| Category | Purpose | Legal Basis | Consent |
|---|---|---|---|
| Essential | Authentication, security, session management, load balancing, fraud prevention, CSRF protection | Legitimate interest | No |
| Analytics | Usage measurement, performance monitoring, feature adoption, error tracking | Consent | Yes (opt-in) |
| Marketing | Attribution, retargeting, personalized content, email engagement | Consent | Yes (opt-in) |
| Preferences | Language, region, dashboard layout, consent choices | Legitimate interest | No |
3. Detailed Cookie List
3.1 Essential (Strictly Necessary)
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| haqeeba_session | Haqeeba | Authentication session | Session / 30 days |
| haqeeba_csrf | Haqeeba | CSRF protection | Session |
| __cf_bm | Cloudflare | Bot management / DDoS protection | 30 minutes |
| haqeeba_consent | Haqeeba | Cookie consent preferences | 1 year |
3.2 Analytics (Opt-in Required)
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Usage analytics | 13 months |
| amplitude_id | Amplitude | Product analytics | 1 year |
| sentry_replay | Sentry | Session replay (errors only) | Session |
3.3 Marketing (Opt-in Required)
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| _fbp | Meta | Conversion tracking | 90 days |
| _gcl_au | Google Ads | Conversion tracking | 90 days |
| li_sugr | Retargeting | 90 days |
3.4 Preferences
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| haqeeba_locale | Haqeeba | Language preference | 1 year |
| haqeeba_theme | Haqeeba | Dark/light mode | 1 year |
4. Third-Party Cookies & International Transfers
We use third-party services that set their own cookies. Where these providers process Personal Data outside the DIFC, we ensure DP Law 2020 Art. 23–26 safeguards (SCCs, adequacy, supplementary measures).
- Google Analytics / Ads — SCCs in place
- Amplitude — SCCs in place
- Cloudflare — Adequacy / SCCs
- Meta, LinkedIn — Conversion pixels (only with marketing consent), SCCs in place
- Sentry — Error monitoring (session replay only on error pages), SCCs in place
We do not control third-party cookies. Review their policies for details.
5. Managing Preferences (DP Law 2020 Art. 9)
5.1 Cookie Banner
On first visit, our banner lets you accept all, reject non-essential, or customize. Preferences are stored in haqeeba_consent. Consent is freely given, specific, informed, and unambiguous per DP Law 2020 Art. 9.
5.2 Change Consent
Click the “Cookie Preferences” link in the footer anytime to reopen the banner and modify choices.
5.3 Browser Controls
Most browsers let you block/delete cookies. Blocking essential cookies may break the Service.
5.4 Do Not Track
We do not currently respond to DNT signals. Consent is managed via our banner per DP Law 2020.
5.5 Withdrawal of Consent
You may withdraw consent at any time via the Cookie Preferences link. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
6. Contact
Questions about this policy: contact@haqeeba.org
Data Protection Officer: contact@haqeeba.org
Supervisory Authority: DIFC Commissioner of Data Protection