1.What technologies we use
"Cookies" means small text files placed on your device. This policy also covers functionally equivalent technologies, including HTML5 local storage, session storage and pixel tags. LeanPlay uses local storage to remember your selected interface language and your active workspace role.
2.Categories and legal treatment
- Strictly necessary: authentication, session integrity, load balancing, security and fraud prevention, and storage of your language preference where it is required to deliver the interface you requested. These are exempt from the consent requirement under Article 5(3) ePrivacy Directive, being strictly necessary for the provision of a service explicitly requested by you.
- Preference: retention of non-essential interface settings. Placed on the basis of consent.
- Measurement and performance: aggregated, privacy-preserving statistics on platform usage and reliability. Placed on the basis of consent; declining has no effect on functionality.
- Advertising and cross-site tracking: not used. LeanPlay does not operate behavioural advertising, does not deploy third-party advertising cookies and does not track Users across unrelated websites.
3.Duration
Session cookies expire when the browser is closed. Persistent preference storage remains until you clear it or reset your choices; measurement identifiers, where consented, are retained for no longer than thirteen (13) months and are not renewed automatically without a fresh consent.
4.Managing and withdrawing consent
Where consent is required, it is requested through a banner offering equally prominent options to accept or reject, with no pre-ticked boxes and no consequence for refusal. You may withdraw or vary consent at any time through the cookie settings link in the footer, and withdrawal is as easy as giving consent.
You may additionally delete or block cookies through your browser settings. Blocking strictly necessary cookies may prevent authentication and secure document access from functioning.
5.Third-party processors
Where measurement or infrastructure providers place technologies on your device, they act as processors on documented instructions and are bound by the terms set out in the Data Processing Addendum. A current list of such providers is available on request and is maintained in the sub-processor register.
6.Changes
This policy will be updated whenever new technologies are introduced. Where a new non-exempt technology is deployed, fresh consent will be requested before it is placed on your device.