Locktera Cookie Policy

1. Introduction and Scope

Locktera, Inc. (“Locktera,” “we,” “us,” or “our”) uses cookies and, where applicable, similar browser technologies to operate its website and provide secure access to its products and services. This Cookie Policy explains those technologies, why they are used, and the choices available to visitors and users.

This Policy applies to the public website at locktera.com and to Locktera web-based products and applications, including Locktera Share, to the extent cookies or similar browser technologies are used. It supplements our Privacy Policy and applicable product agreements. A product may use server-side logging that is not itself a cookie or browser-storage technology.

2. What Cookies Are

Cookies are small text files stored or accessed by a browser. Some expire at the end of a browser session; others persist for a specified period. First-party cookies are set by the site or application being visited, while third-party cookies may be set by external providers. Similar technologies, such as browser storage, may also support application functionality.

3. Cookies and Technologies We Use

3.1 Required Product Authentication and Security

Locktera products require certain cookies or similar technologies for authentication, login sessions, access authorization, security enforcement, and essential application operation. Blocking these technologies may prevent sign-in or use of the relevant product.

3.2 Required Product Audit and Access-Control Functions

As integral and required features of Locktera’s services, its products collect activity information from the user’s or viewer’s browser, including document opens and access attempts, page-level viewing duration, downloads and access denials, and information used for IP address and geographic access enforcement. Locktera records this information in its application systems and provides audit reports to the customer or authorized content owner requiring these security, access-control, and accountability capabilities. Browser-based event collection does not necessarily mean that each event uses a cookie.

Where a cookie or similar browser technology supports a required product function, Locktera assesses whether it is strictly necessary under applicable law. The fact that an audit function is part of the contracted service does not by itself exempt every browser-side technology from consent requirements.

3.3 Public Website Analytics

Locktera uses Google Analytics on its public website to understand website traffic and performance. Google Analytics may use cookies or similar technologies to collect information about visits and interactions. Where required by applicable law, Locktera will obtain consent before activating non-essential analytics technologies and will provide a means to withdraw that consent.

3.4 No Advertising or Behavioral Targeting

Locktera does not use advertising cookies, behavioral advertising, or behavioral targeting technologies. Required product security and audit events are not used for advertising or marketing profiling.

3.5 Microsoft Clarity

Locktera uses Microsoft Clarity to better understand how visitors interact with its public website and to improve website usability, navigation, and performance. Microsoft Clarity may collect information about website interactions, including clicks, scrolling, navigation patterns, and session activity, through cookies and similar technologies.

Microsoft Clarity is used for website analytics and usability improvements, not for monitoring protected documents or Locktera product audit activities. Where required by applicable law, Clarity’s non-essential tracking technologies are activated only after the visitor provides valid consent through Locktera’s cookie consent management system.

3.6 Embedded Video Content

Where Locktera embeds videos hosted by third parties, including YouTube, those providers may use cookies or similar technologies when visitors interact with the embedded content. Where required by applicable law, non-essential cookies associated with embedded videos are subject to visitor consent preferences.

4. Product Security and Audit Information

Locktera’s products collect required security and audit information from the browser, which may include user or viewer identifiers, authentication and session events, protected-content access, page-level viewing duration, download events, access denials, IP addresses, and location information used for geographic access enforcement. These activities are required components of the security, access control, and audit services provided to customers. The resulting records are used to generate audit reports for the content owner whose protected content is being accessed. Audit information may also be made available to authorized personnel within the content owner’s organization who have a legitimate business, security, compliance, or administrative need to know, subject to applicable permissions and access controls.

Audit records are made available for the content owner’s security and accountability purposes, not for advertising, behavioral targeting, or marketing profiling. These records are distinct from website analytics technologies, including Google Analytics and Microsoft Clarity. Personal information processed in connection with security and audit services is further addressed in our Privacy Policy and applicable customer agreements.

5. Cookie Inventory and Retention

Locktera Share uses first-party persistent authentication cookies described in the September 2023 policy: an OAuth login cookie that expires after 24 hours and a session cookie used for API authentication that expires after seven days. These retention periods have been confirmed against the current product configuration. Cookie names and technical attributes may be maintained in a separate technical inventory.

The table above identifies required product authentication technologies, browser-based security and audit functions, website analytics technologies including Google Analytics and Microsoft Clarity, and consent-management technologies. Browser-collected audit events are described separately from cookies because collecting information from a browser does not necessarily involve storing a cookie. Actual cookie names and retention periods depend on the services and settings in use.

6. Consent and Your Choices

Locktera uses Complianz to manage cookie consent preferences on its public website. Visitors are provided with options to accept or reject non-essential cookies and, where available, customize their cookie preferences.

Cookies and similar technologies that are strictly necessary for website functionality, authentication, security, or services explicitly requested by users may operate without separate cookie consent where permitted by applicable law.

Non-essential analytics cookies, including those associated with Google Analytics and Microsoft Clarity, are subject to applicable consent requirements. Where consent is required, these technologies are not activated until the visitor provides valid consent.

Visitors may withdraw or modify their consent preferences using the cookie preference controls available on the Locktera website.

Visitors may also manage or delete cookies through their browser settings. Disabling essential cookies may affect website functionality or prevent access to certain Locktera products and services.

Product authentication, security enforcement, access-control functions, and required audit capabilities are integral components of Locktera's services. These functions are separate from optional website analytics and are not used for behavioral advertising or marketing profiling.

7. Third-Party Service Providers

Google provides the Google Analytics service used on the public website. Microsoft provides the Microsoft Clarity website analytics service, which Locktera uses to analyze website interactions and improve usability.

Locktera uses Complianz as its website cookie consent management solution. Complianz supports cookie notices, management of visitor preferences, and recording of consent choices, as applicable.

Where embedded YouTube videos or third-party website security services are used, those providers may use cookies or similar browser technologies. Authentication or infrastructure providers may also support necessary product functions. The identity and role of providers placing cookies or similar technologies should be reflected in Locktera's current technical inventory and relevant privacy disclosures.

8. International Visitors and Applicable Law

Requirements governing cookies and similar technologies vary by jurisdiction. Locktera applies consent or other controls where required by applicable law, including relevant UK and EU rules for non-essential analytics technologies. Separate privacy obligations may apply to personal information generated through essential product security and audit activities.

9. Changes to This Policy

Locktera may revise this Policy to reflect changes in technologies, products, legal requirements, or business practices. The effective and last-updated dates above will be revised when material changes are published.

10. Contact Information

Locktera, Inc.
Attn: Legal Department
391 Las Colinas Blvd E, Ste 130
Irving, TX 75039-6291
United States
Email: legal@locktera.com
Website: https://locktera.com