Cookie Policy
Last Updated: September 2026
This Cookie Policy explains how Omphacite ("we," "us," "our," or the "Company") uses cookies, web beacons, tracking pixels, and similar technologies (collectively, "Cookies") on our website and Software-as-a-Service platform, omphacite.org (the "Service"). This policy is incorporated into and governed by our broader Privacy Policy and Terms and Conditions. By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Cookie Policy.
1. What Are Cookies
Cookies are small text files placed on your device (computer, tablet, smartphone, or other connected device) by the websites you visit. They are widely used to make websites function efficiently, provide a better user experience, and deliver information to the site operators. Cookies allow websites to remember your actions and preferences over a period of time, so you do not have to re-enter them every time you navigate the site or return to it. In addition to traditional browser cookies, this policy also covers similar tracking technologies such as web beacons (clear GIFs), pixel tags, local storage, and mobile device identifiers.
In the United States, the legal framework governing the use of these technologies does not mandate a universal, prior opt-in consent requirement for all cookies. Instead, the US follows a "notice-and-choice" model. Under this model, companies are generally permitted to deploy cookies to provide notice to users, who then have the choice of whether to continue using the service. However, this model is subject to strict exceptions. For example, the Federal Trade Commission Act § 5, 15 U.S.C. § 45 (FTC Act — unfair/deceptive practices) strictly prohibits deceptive or unfair tracking practices, meaning that companies must honor the privacy promises they make to users.
Furthermore, specific state and federal statutes impose targeted restrictions on cookie usage. For instance, the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA), requires verifiable parental opt-in consent before deploying persistent tracking technologies on children under 13. Similarly, sector-specific laws such as the Health Insurance Portability and Accountability Act (HIPAA) where applicable, and the Gramm-Leach-Bliley Act, 15 U.S.C. §§ 6801-6809 (GLBA) for financial institutions, impose strict confidentiality and security requirements on tracking technologies that capture protected health or financial information.
It is important to understand that while cookies are a standard part of the modern internet, the legal landscape surrounding them is rapidly evolving. We continuously monitor legislative developments to ensure that our use of tracking technologies aligns with the most current legal standards and industry best practices.
2. Types of Cookies We Use
We use several distinct categories of Cookies to operate, secure, and improve the Service. The primary classifications are based on their duration and function. Duration-wise, we use "Session Cookies," which are temporary and remain on your device only until you close your browser or log out, and "Persistent Cookies," which remain on your device for a predetermined period or until you manually delete them. Function-wise, we categorize Cookies into Essential, Analytics, Marketing, and Third-Party Cookies, each serving a specific operational purpose detailed in the subsequent sections of this policy.
Our deployment of these technologies is designed to comply with the growing patchwork of US state comprehensive privacy laws. This includes the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), the Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.), the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), and the Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.). We also monitor and comply with State comprehensive privacy laws (TX, OR, MT, FL, TN, etc.) as they come into effect.
Under these state laws, certain cookies—particularly those used for cross-context behavioral advertising or building consumer profiles for targeted marketing—may constitute "sales" or "sharing" of personal information. While the US notice-and-choice model does not require general opt-in consent for all cookies, we respect the opt-out rights provided by these state statutes. We ensure that users have clear mechanisms to exercise their right to opt out of targeted advertising and profiling where legally required.
We classify our Cookies to provide you with maximum transparency. By understanding the types of Cookies we use, you can make informed decisions about how you interact with the Service and how you manage your privacy preferences through your browser settings or our cookie management tools.
3. Essential Cookies
Essential Cookies, sometimes referred to as "strictly necessary" cookies, are absolutely critical for the core functionality of the Service. These Cookies enable basic functions such as page navigation, access to secure areas of the website, user authentication, and the maintenance of user sessions. Without these Cookies, the Service cannot function properly, and certain features would be inaccessible. For example, when you log into your SaaS account, Essential Cookies are used to verify your identity across different pages and ensure that your session remains secure.
Because Essential Cookies are necessary for the fundamental operation of the Service, they do not require prior opt-in consent under the US notice-and-choice model. The deployment of these Cookies is considered a necessary part of providing the requested service to the user. However, we remain fully transparent about their use in this policy. We limit the data collected by Essential Cookies to only what is strictly necessary to deliver the core functionality of the Service.
Furthermore, Essential Cookies often play a vital role in security. They help prevent Cross-Site Request Forgery (CSRF) attacks, manage load balancing to ensure the Service remains available during high traffic periods, and enable secure communication between your device and our servers. The security of your data is paramount, and these Cookies are a critical component of our defense infrastructure.
We do not use Essential Cookies for tracking, analytics, or targeted advertising purposes. They are strictly isolated to ensure the Service operates securely and efficiently. Disabling Essential Cookies through your browser settings will significantly degrade or entirely prevent your ability to use the Service.
4. Analytics Cookies
Analytics Cookies allow us to understand how visitors interact with the Service by collecting and reporting information anonymously. These Cookies are used to gather data such as the number of visitors to the site, the time spent on individual pages, the source of traffic (e.g., search engines or direct visits), and error messages. This aggregated and de-identified information helps us improve the performance, design, and content of the Service, ensuring that we are meeting the needs of our users and optimizing the overall user experience.
While Analytics Cookies generally do not identify individual users, we take extensive measures to ensure that any data collected is anonymized and aggregated to the fullest extent possible. We do not use Analytics Cookies to build individualized profiles for targeted advertising. Our use of analytics data is strictly limited to internal operational purposes, such as measuring the effectiveness of new features, diagnosing technical issues, and understanding broad usage trends.
Under US privacy laws, the use of Analytics Cookies is generally permissible under the notice-and-choice framework, provided that the data collected is not used to "sell" or "share" personal information for cross-context behavioral advertising. We ensure that our analytics providers are contractually bound to process such data in a de-identified manner and are prohibited from attempting to re-identify the data. This aligns with the requirements of state comprehensive privacy laws, which provide exemptions for de-identified data.
Users who prefer not to have their aggregated usage data collected via Analytics Cookies may disable them through their browser settings or by utilizing our cookie preference management tools. However, disabling these Cookies will not affect the core functionality of the Service, though it may limit our ability to improve the platform based on aggregate user feedback.
5. Marketing Cookies
Marketing Cookies are used to deliver advertisements that are relevant to your interests. These Cookies track your browsing habits across different websites and online services to build a profile of your preferences. This profile is then used by us and our advertising partners to display targeted advertisements on our Service and on third-party websites. The goal of Marketing Cookies is to ensure that the advertising you see is more relevant to you, thereby enhancing the value for both advertisers and users.
The use of Marketing Cookies for cross-context behavioral advertising is subject to specific legal restrictions in the United States. Under the California Consumer Privacy Act as amended by CPRA — 'Do Not Sell or Share My Personal Information' / Global Privacy Control obligations (Cal. Civ. Code § 1798.120, § 1798.135), users have the right to opt out of the "sale" or "sharing" of their personal information for targeted advertising purposes. We honor these opt-out requests and provide clear mechanisms for users to exercise their rights.
In addition to honoring our own opt-out mechanisms, we strictly adhere to industry-standard opt-out signals. We process and respect Global Privacy Control (GPC) signals transmitted by user browsers. When a GPC signal is detected, we automatically treat it as a valid request to opt out of the sale or sharing of personal information for targeted advertising, as required by California law and increasingly by other state comprehensive privacy laws. We also honor the opt-out preferences established through the Digital Advertising Alliance (DAA) and Network Advertising Initiative (NAI) AdChoices programs.
Furthermore, if the Service is directed to or knowingly collects data from children under 13, we comply strictly with the Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501-6506 (COPPA), and the COPPA Rule as amended effective June 2025 (16 C.F.R. Part 312, 2025 amendments). We do not deploy Marketing Cookies that track children without verifiable parental opt-in consent. Users under 18 in California are also afforded specific protections regarding marketing profiling, which we fully respect and implement.
6. Third-Party Cookies
In addition to our own first-party Cookies, we allow certain third-party service providers to set Third-Party Cookies on your device when you interact with the Service. These third parties include analytics providers, advertising networks, social media platforms, and payment processors. Third-Party Cookies are governed by the respective privacy policies of the companies that set them, and Omphacite does not have direct control over how these third parties use the information collected through their Cookies.
The deployment of Third-Party Cookies carries specific legal risks that we actively manage. For instance, the Electronic Communications Privacy Act, 18 U.S.C. § 2511 (limited application), and various state wiretapping and computer privacy statutes, such as the California Invasion of Privacy Act § 631, have been increasingly invoked in litigation regarding session-replay technologies and unauthorized interception of communications. To mitigate these risks, we conduct thorough due diligence on our third-party vendors and restrict the deployment of high-risk tracking technologies, such as session replay scripts, unless strictly necessary and legally compliant.
We require all third-party service providers to enter into comprehensive data processing agreements that mandate compliance with applicable US privacy laws. These agreements prohibit our vendors from using Third-Party Cookies to sell or share personal information for their own independent commercial purposes. We also ensure that third parties providing marketing cookies honor opt-out signals, including Global Privacy Control (GPC) and the DAA/AdChoices opt-out mechanisms.
Despite our stringent vendor management protocols, the practices of third parties are subject to change. We strongly encourage you to review the privacy and cookie policies of these third-party providers to understand how they use the information they collect. We disclaim liability for the independent tracking practices of third parties that violate our agreements or applicable law, though we will take immediate action to terminate non-compliant vendors upon discovery of such violations.
7. How to Control Cookies
As a user of the Service, you have multiple mechanisms to control, manage, and delete Cookies on your devices. Under the US notice-and-choice model, your continued use of the Service after receiving notice of our cookie practices constitutes your acknowledgment and acceptance of those practices. However, you retain the right to withdraw your choice at any time by disabling or deleting Cookies through your browser settings or by utilizing the opt-out tools we provide.
For users residing in states with comprehensive privacy laws, such as the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.), the Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.), the Colorado Privacy Act (C.R.S. § 6-1-1300 et seq.), the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), and the Utah Consumer Privacy Act (Utah Code § 13-11-101 et seq.), we provide specific mechanisms to exercise your right to opt out of targeted advertising and the sale or sharing of personal information. You can utilize the "Do Not Sell or Share My Personal Information" link provided in our website footer or send an email to our designated contact address.
We also automatically process browser-based opt-out signals, such as the Global Privacy Control (GPC). If your browser is configured to transmit a GPC signal, our systems will detect it and apply the necessary opt-out preferences to your account and device, preventing the deployment of Marketing Cookies that constitute a sale or share of personal information. This automated processing ensures seamless compliance with your privacy preferences without requiring manual intervention.
If you wish to delete Cookies that have already been placed on your device, you can do so through your browser's privacy or security settings. Deleting Cookies will remove tracking data, but it may also log you out of the Service and require you to re-enter your preferences. For instructions on how to manage Cookies on specific mobile applications, please refer to the settings menu within the application itself or the operating system's privacy controls.
8. Browser Settings
Most modern web browsers provide built-in tools that allow you to control how Cookies are handled. You can typically configure your browser to accept all Cookies, reject all Cookies, or prompt you before a Cookie is placed on your device. You can also use your browser settings to delete Cookies that have already been placed on your device. Because the exact steps for managing Cookies vary depending on the browser you use, we recommend consulting the help documentation provided by the browser manufacturer.
Below are links to the cookie management settings for the most common web browsers:
It is important to note that disabling Cookies through your browser settings may impact your ability to use certain features of the Service. If you disable Essential Cookies, you will not be able to log in, access secure areas, or utilize the core SaaS functionalities. If you disable Analytics or Marketing Cookies, the Service will continue to function, but you may experience less relevant advertising and a degraded personalized experience.
In addition to browser settings, you can manage certain Third-Party Cookies by utilizing industry opt-out tools. For targeted advertising cookies, you can opt out of receiving personalized advertisements from member companies of the Digital Advertising Alliance (DAA) and the Network Advertising Initiative (NAI) by visiting their respective opt-out pages. These opt-outs are device and browser-specific, meaning you will need to execute the opt-out on each device and browser you use to access the Service.
9. Updates to Policy
The legal and technological landscape surrounding data privacy and tracking technologies is constantly evolving. As new federal and state laws are enacted, and as regulatory guidance from agencies such as the Federal Trade Commission is updated, we will continuously review and revise our Cookie Policy to ensure ongoing compliance. We reserve the right to modify, update, or amend this Cookie Policy at any time at our sole discretion.
When we make material changes to this Cookie Policy, we will update the "Last Updated" date at the top of this page and provide notice of the changes through the Service. Depending on the nature of the changes, we may provide a more prominent notice, such as a pop-up notification or an email alert to registered users. We encourage you to review this Cookie Policy periodically to stay informed about how we use Cookies and how you can manage your privacy preferences.
Your continued use of the Service following the posting of any changes to this Cookie Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Cookie Policy, you have the right to stop using the Service and request the deletion of your account and associated data, subject to our Terms and Conditions and applicable legal retention requirements.
We will maintain an archive of previous versions of this Cookie Policy for your reference. If you wish to review a prior version of this policy or require further clarification regarding any updates, please contact us using the information provided in the Contact Information section below.
10. Contact Information
If you have any questions, concerns, or requests regarding this Cookie Policy or our data practices, please contact our designated privacy team. We are committed to addressing your inquiries promptly and in accordance with applicable US privacy laws. For specific requests related to exercising your privacy rights, such as opting out of the sale or sharing of personal information, please include clear details in your communication to facilitate a swift resolution.
You may contact us using the following details:
Omphacite
Attn: Privacy / Legal Department
350 Fifth Avenue, New York, NY 10118, United States
Email: [email protected]
Phone: +18069624858
For users residing in states with comprehensive privacy laws, including but not limited to California, Virginia, Colorado, Connecticut, and Utah, we are legally obligated to provide clear mechanisms for submitting privacy requests. Our designated contact channels above serve as the official methods for submitting such requests. We will verify your identity as required by law before processing any specific data rights requests to protect the security of your personal information.
We aim to respond to all legitimate inquiries within the timeframes mandated by applicable state laws, typically within forty-five (45) days of receiving a verified request. If we require additional time to process your request, we will inform you of the reason for the delay and provide an estimated response time. Thank you for trusting Omphacite with your privacy and security.