Cookie Policy

LYMERA AB
Effective Date: September 22, 2025
Last Updated: September 22, 2025

1. Introduction

This Cookie Policy explains how LYMERA AB ("we," "our," or "us") uses cookies and similar tracking technologies on our website lymo.me and related services (the "Service").

This policy should be read together with our Privacy Policy and Terms of Service.

2. What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They contain information that is transferred to your device's hard drive and help websites recognize your device and remember certain information about your visit.

2.1 Types of Cookies

  • Session Cookies: Temporary cookies that are deleted when you close your browser
  • Persistent Cookies: Cookies that remain on your device for a set period or until manually deleted
  • First-Party Cookies: Set by the website you're visiting (lymo.me)
  • Third-Party Cookies: Set by external services we use (like Google Analytics)

3. Cookies We Use

3.1 Essential Cookies

These cookies are necessary for the basic functionality of our Service:

Cookie NamePurposeDurationType
session_tokenMaintains user login sessionSessionFirst-party
auth_stateAuthentication state management24 hoursFirst-party
csrf_tokenSecurity protection against cross-site request forgerySessionFirst-party
cookie_consentStores your cookie preferences1 yearFirst-party

3.2 Analytics Cookies

We use Google Analytics and Vercel Analytics to understand how visitors use our website:

Cookie NamePurposeDurationType
_gaDistinguishes unique users2 yearsThird-party (Google)
_ga_*Contains campaign-related information2 yearsThird-party (Google)
_gidDistinguishes unique users24 hoursThird-party (Google)
_gatThrottles request rate1 minuteThird-party (Google)
va-*Vercel Analytics tracking and performance metricsSessionThird-party (Vercel)

Analytics Information Collected:

Google Analytics:

  • Pages visited and time spent
  • Geographic location (country/region)
  • Device and browser information
  • Traffic sources and referral data
  • User interactions and behavior patterns

Vercel Analytics:

  • Page views and unique visitors
  • Performance metrics (page load times)
  • Basic device and browser information
  • Referrer information
  • No personal identifiers collected

3.3 Functional Cookies

These cookies enhance your experience by remembering your preferences:

Cookie NamePurposeDurationType
theme_preferenceRemembers dark/light mode setting1 yearFirst-party
language_preferenceStores language selection1 yearFirst-party
dashboard_layoutSaves dashboard customization6 monthsFirst-party
tutorial_completedTracks onboarding progress1 yearFirst-party

3.4 Performance Cookies

These cookies help us monitor and improve our Service performance:

Cookie NamePurposeDurationType
performance_timingMeasures page load timesSessionFirst-party
error_trackingTracks JavaScript errorsSessionFirst-party
feature_usageMonitors feature adoption30 daysFirst-party

4. Managing Your Cookie Preferences

4.1 Consent

When you first visit lymo.me, you'll see a cookie banner that allows you to:

  • Accept all cookies
  • Reject non-essential cookies
  • Customize your cookie preferences
  • Learn more about our cookie usage

4.2 Managing Cookie Preferences

You can change your cookie preferences at any time by:

  • Visiting our Cookie Preference Center (link in footer)
  • Updating your account settings (for logged-in users)
  • Using browser controls to block or delete cookies

4.3 Browser Controls

Most browsers allow you to:

  • View and delete cookies
  • Block cookies from specific websites
  • Block all cookies (may affect functionality)
  • Receive notifications when cookies are set

Browser Cookie Settings:

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Manage Website Data
  • Edge: Settings → Cookies and site permissions → Cookies and site data

5. Legal Basis for Cookie Use

Under GDPR and applicable laws, we use cookies based on:

5.1 Consent

  • Analytics cookies (Google Analytics, Vercel Analytics)
  • Marketing cookies (when applicable)
  • Non-essential functional cookies

5.2 Legitimate Interest

  • Essential cookies for Service functionality
  • Security and fraud prevention cookies
  • Performance monitoring cookies

5.3 Contract Performance

  • Authentication and session management cookies
  • Payment processing cookies (during transactions)

6. Data Protection and Security

6.1 Cookie Security

  • Secure transmission using HTTPS
  • HttpOnly flags to prevent script access
  • SameSite attributes for CSRF protection
  • Regular security audits and updates

6.2 Data Retention

  • Session cookies: Deleted when browser closes
  • Persistent cookies: Automatically expire based on set duration
  • Analytics data: Retained according to Google Analytics settings (26 months)

6.3 Data Sharing

  • First-party cookies: Data not shared with third parties
  • Third-party cookies: Governed by respective privacy policies
  • No sale of cookie data to advertisers

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access: Request information about cookies and data collection
  • Rectification: Correct inaccurate cookie preference data
  • Erasure: Request deletion of cookie data (where technically feasible)
  • Restriction: Limit cookie processing through preference settings
  • Objection: Object to non-essential cookie usage
  • Withdrawal: Withdraw cookie consent at any time

8. International Transfers

Some third-party services may transfer cookie data outside the EU:

8.1 Google Analytics

  • Data may be transferred to the US
  • Google participates in relevant data transfer frameworks
  • Standard Contractual Clauses in place

8.2 Vercel Analytics

  • Data may be processed in the US by Vercel Inc.
  • Privacy-first analytics with minimal data collection
  • Standard Contractual Clauses in place for data transfers

8.3 Safeguards

  • We ensure adequate protection for all data transfers
  • Regular assessment of third-party compliance
  • Alternative solutions for EU data residency when available

9. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect cookie data from children under 16 years of age.

10. Updates to This Policy

We may update this Cookie Policy to reflect:

  • Changes in our cookie usage
  • New third-party services
  • Legal or regulatory requirements
  • Technology updates

Notification of Changes:

  • Email notification for material changes
  • Website banner for policy updates
  • Updated effective date at the top of this policy

11. Do Not Track

Some browsers include "Do Not Track" signals. Currently, there is no standard for how websites should respond to these signals, so we do not alter our cookie practices based on Do Not Track requests.

12. Cookie-Free Alternatives

If you prefer not to use cookies, you can:

  • Use our Service with essential cookies only
  • Contact us for alternative access methods
  • Use browser private/incognito mode (limited functionality)

13. Technical Information

13.1 Cookie Storage

  • Cookies are stored locally on your device
  • No personal data in cookie names or most values
  • Encrypted authentication tokens for security

13.2 Cross-Site Tracking

  • We do not participate in cross-site tracking networks
  • Our cookies are specific to lymo.me domain
  • Third-party cookies governed by respective policies

14. Contact Information

For questions about this Cookie Policy or our cookie practices:

LYMERA AB
Email: lymoadsai@gmail.com

This Cookie Policy is governed by Swedish law and GDPR requirements. Last updated: September 22, 2025