This policy explains how CoreLayerEngine uses cookies and similar technologies on our website and app, and how you can control them. By "cookies" we mean cookies and equivalent browser storage (such as localStorage).
| Category | What it does | Examples | Consent |
|---|---|---|---|
| Strictly necessary | Required to sign you in and keep the service secure. The site cannot function without these. | cl_session (sign-in, HttpOnly, SameSite=Lax, 7 days), cl_csrf (anti-forgery), cl_ostate (short-lived, during an OAuth connection), cle_consent (records your choice here, 180 days), plus theme & currency preferences | Always on (exempt) |
| Analytics | Helps us understand how the product is used so we can improve it. | Privacy-friendly usage measurement (enabled only with your consent) | Off by default |
| Marketing | Personalised offers and measuring the effectiveness of our campaigns. | Advertising & conversion measurement (enabled only with your consent) | Off by default |
The console — this application — uses only strictly-necessary cookies, and no script here is wired to the Analytics or Marketing categories, so choosing "Accept all" loads nothing extra. The marketing website at corelayerengine.com is different: it runs Google Analytics and sets _ga (and a per-property _ga_<id>) where analytics storage is granted. Every Google advertising category is denied before the tag loads, and in the EEA, the UK and Switzerland analytics storage is denied too, so no cookie is written there. The full account is in our Privacy Policy. Our CDN (Cloudflare) may serve a cookieless analytics beacon, which sets no browser storage and uses no cross-site identifiers. That site also stores a theme preference in your local storage.
When you first visit, you can Accept all, Reject non-essential, or open Preferences to choose per category. Your choice is stored in a cle_consent cookie for 180 days, and non-essential scripts are blocked until you opt in. You can change your mind at any time:
Payments are handled on our processors' own secure checkout pages (Stripe, Razorpay, Cashfree, Paddle, Lemon Squeezy) — card details never touch our servers, and any cookies set there are governed by their policies. Our CDN (Cloudflare) provides security and cookieless analytics.
Under the India DPDP Act, the EU/UK GDPR and similar laws, you can access, correct, or erase your personal data and withdraw consent. Email innovations@ektasi.io or use the in-app Privacy & data tools.
© 2026 CoreLayerEngine · corelayerengine.com