This document provides an exhaustive inventory of all first-party and third-party cookies, local storage keys, and client-side tokens utilized across the Aevo Labs website, and explains how you maintain complete control over your preferences.
01 Technologies and Client-Side Storage
When you visit the Aevo Labs website, small files and state tokens may be saved onto your browser or device. These include:
- HTTP Cookies: Small strings of text sent from a web server and stored by your browser. They can be first-party (set directly by Aevo Labs) or third-party (set by integrated external services such as Calendly or Cloudflare).
- HTML5 LocalStorage and SessionStorage: Client-side key-value storage mechanisms that allow modern web applications to store preferences (such as audio volume or consent logs) with zero server-side overhead and no transmission over every network request.
- Device and Render Tokens: Temporary WebGL canvas states and graphic buffer variables used by Three.js to run our 3D camera intro and video canvas at 60 frames per second.
02 Legal Grounds and Zero-Dark-Pattern Architecture
Under Article 5(3) of the European Union ePrivacy Directive (Directive 2002/58/EC as amended), the UK Privacy and Electronic Communications Regulations (PECR), the UAE Personal Data Protection Law (Federal Decree-Law 45 of 2021), and the India DPDP Act 2023:
1. Hard Blocking Before Consent: No non-essential cookie, analytics script, or third-party embed is loaded or fired until you provide affirmative consent.
2. Equal-Weight Presentation: Our consent banner presents Accept all, Reject all, and Customize with equal visual weight, equal button size, and identical accessibility affordances. Rejecting cookies is as effortless as accepting them.
3. No Cookie Wall: You are never locked out of reading our portfolio, viewing our work, or contacting our studio if you choose to reject non-essential cookies.
4. 12-Month Lifecycle: Your consent preference is preserved for 365 days, after which we will prompt you again to re-confirm your choices.
03 Strictly Necessary Technologies (Always Active)
These technologies are technically essential to deliver the core service, maintain cyber security, protect against bot traffic, and remember your privacy choices. Because the site cannot function without them, they cannot be turned off.
| Key / Cookie | Type and Provider | Duration | Technical Purpose |
|---|---|---|---|
| aevo_cookie_consent | 1st-Party (localStorage & Cookie) | 12 months (365 days) | Stores your granular consent record, consent timestamp, and policy version (1.0.0) to avoid repeated prompts. |
| __cf_bm | 3rd-Party (Cloudflare) | 30 minutes | Cloudflare bot management token used to distinguish between legitimate human visitors and automated scrapers or malicious bots. |
| _cfuvid | 3rd-Party (Cloudflare) | Session | Rate limiting and DDoS mitigation token to protect backend API endpoints and video streaming bandwidth. |
04 Preferences (Optional)
Preferences allow the website to remember choices you make while navigating our cinematic environment, ensuring a seamless experience across browser refreshes.
| Key / Cookie | Type and Provider | Duration | Technical Purpose |
|---|---|---|---|
| aevo_ui_prefs | 1st-Party (localStorage) | 12 months | Preserves your customized audio mute state, sound volume level, and navigation window state so video audio behaves as you intended on subsequent visits. |
05 Analytics and Telemetry (Optional)
Analytics cookies assist our engineering and creative team in measuring website engagement, such as video playback completion rates, navigation speed, and scroll ergonomics. All data is pseudonymous and aggregated. We implement Google Consent Mode v2 with default denied state.
| Key / Cookie | Type and Provider | Duration | Technical Purpose |
|---|---|---|---|
| _ga, _ga_* | 3rd-Party (Google LLC via Consent Mode v2) | 2 years | Calculates visitor, session, and campaign data while tracking site usage for analytics reports. Strictly blocked until explicit consent is granted. |
| optimizelyEndUserId | 3rd-Party (Optimizely via Calendly embed) | 6 months | Measures consultation booking funnel retention and user experience performance within the scheduling component. |
06 Marketing and Third-Party Embeds (Optional)
These technologies support interactive third-party integrations, specifically our discovery consultation scheduling widget powered by Calendly LLC. If disabled, third-party embeds display an interactive click-to-load confirmation box.
| Key / Cookie | Type and Provider | Duration | Technical Purpose |
|---|---|---|---|
| _calendly_session | 3rd-Party (Calendly LLC) | Session | Maintains active booking state, appointment slot reservation, and authentication tokens inside the scheduling modal. |
| __stripe_mid, __stripe_sid | 3rd-Party (Stripe via Calendly) | 1 year / 30 mins | Fraud detection and payment authentication if client consultation bookings require transactional authorization. |
07 Global Privacy Control (GPC) and Do Not Track Recognition
Aevo Labs respects your universal browser privacy preferences. Our website automatically detects:
- Global Privacy Control: If your browser transmits `navigator.globalPrivacyControl === true`, our consent engine automatically sets Analytics and Marketing categories to denied.
- Do Not Track: If your browser sends a `DNT: 1` header or `navigator.doNotTrack === "1"`, tracking technologies remain completely disabled.
08 How to Inspect, Modify, or Withdraw Consent
You can change your consent choices or withdraw consent entirely at any time. Revoking consent immediately resets Google Consent Mode v2 and removes associated non-essential cookies.
Click the button below at any time to open your preferences dialog:
09 Browser-Level Cookie Management
You can also block, delete, or configure cookie handling directly inside your browser settings:
- Google Chrome: Settings → Privacy and security → Third-party cookies.
- Apple Safari: Settings → Safari → Privacy and Security → Block All Cookies.
- Mozilla Firefox: Settings → Privacy and Security → Enhanced Tracking Protection.
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.
For further information regarding your legal privacy rights, please consult our full Privacy Policy or contact our Data Protection Team at waleed@aevolabs.org.