Document: Cookie Policy Version: 1.0 (Draft) Effective Date: 06 May 2026 Last Reviewed: 06 May 2026 Governing Law: England and Wales

---

Cookie Policy

This Cookie Policy explains how ALL-IN-ONE DIGITAL SOLUTIONS LTD ("ClipToText", "we", "us", "our") uses cookies and similar tracking technologies on the ClipToText.ai website and platform (collectively, the "Service"), accessible at https://cliptotext.ai.

This Policy should be read alongside our Privacy Policy (https://cliptotext.ai/privacy-policy).

Contact: support@cliptotext.ai or privacy@cliptotext.ai

---

1. Definitions

Term	Meaning
Cookie	A small text file placed on your device (computer, tablet or mobile) by a website you visit. Cookies are widely used to make websites work more efficiently and to provide information to website owners.
Session Cookie	A temporary cookie that is deleted when you close your browser.
Persistent Cookie	A cookie that remains on your device for a defined period or until you delete it.
First-Party Cookie	A cookie set directly by ClipToText.
Third-Party Cookie	A cookie set by a party other than ClipToText (e.g. Cloudflare or an analytics provider).
PECR	The Privacy and Electronic Communications Regulations 2003, which regulate the use of cookies and similar technologies in the UK.
Strictly Necessary Cookie	A cookie required for the essential operation of the Service — these may be placed without consent under PECR Regulation 6(1).

---

2. How We Use Cookies

We use cookies to:

• Keep you securely logged in to your account;
• Protect the Service against cross-site request forgery (CSRF) and other security threats;
• Remember your preferences (such as language and display settings);
• Understand how the Service is used so we can improve it;
• Prevent fraud and unauthorised access.

[ICO GUIDELINE: Under PECR, cookies that are not strictly necessary require clear, informed, prior consent. Pre-ticked boxes or implied consent do not meet the standard. Consent must be as easy to withdraw as to give — ICO Cookies guidance, updated September 2023.]

---

3. Cookie Categories

3.1 Strictly Necessary Cookies

These cookies are essential for the Service to function. They cannot be disabled without preventing core features from working. No consent is required under PECR Regulation 6(1) for strictly necessary cookies, provided we give clear information about them.

Cookie Name	Provider	Purpose	Type	Lifespan
session	ClipToText	Maintains your authenticated session after login	Session	Until browser is closed
PHPSESSID	ClipToText	Server-side PHP session management	Session	Until browser is closed
jwt_token	ClipToText	Stores your JSON Web Token for API authentication	Persistent	1 hour (expires automatically; user must re-authenticate or use refresh token)
refresh_token	ClipToText	Stores your refresh token to maintain sessions without re-authentication	Persistent	30 days (or until logout, which blacklists the token immediately via Redis)
csrf_token	ClipToText	Protects forms against Cross-Site Request Forgery attacks	Session	Until browser is closed
__cf_bm	Cloudflare	Bot management — distinguishes automated traffic from human visitors to protect the Service	Session	30 minutes
cf_clearance	Cloudflare	Records that a browser has passed a Cloudflare security challenge	Persistent	1 year (can be shorter)

3.2 Functional Cookies

These cookies enhance your experience by remembering your choices and preferences. They are not strictly necessary, but improve how the Service feels. We ask for your consent before placing these cookies.

Cookie Name	Provider	Purpose	Type	Lifespan
lang_pref	ClipToText	Remembers your preferred interface language (English, French or Arabic)	Persistent	1 year
ui_settings	ClipToText	Remembers UI preferences (e.g. sidebar collapsed, dark/light mode)	Persistent	6 months
timezone	ClipToText	Stores your timezone to display dates and times correctly	Persistent	1 year

3.3 Analytics Cookies

These cookies collect information about how visitors use the Service — for example, which pages are visited most, how users navigate, and whether errors occur. This helps us understand usage and improve the Service. All analytics data is anonymised or pseudonymised wherever technically possible. We ask for your consent before placing these cookies.

[ICO GUIDELINE: Analytics cookies are not strictly necessary and require consent under PECR — even if data is anonymised. First-party analytics tools with IP anonymisation are less privacy-invasive than third-party tools — ICO Cookies guidance, 2023.]

Cookie Name	Provider	Purpose	Type	Lifespan
(No third-party analytics cookies currently in use)	—	ClipToText currently uses internal server-side analytics only. No third-party analytics cookies are placed. This section will be updated if an analytics tool requiring cookies is introduced in future.	—	—

3.4 Marketing and Retargeting Cookies

We currently do not use marketing or retargeting cookies. No paid advertising pixels (Google Ads, Meta, LinkedIn) are in use.

If we introduce marketing cookies in the future, we will:

• Update this Policy in advance;
• Obtain your explicit consent before placing them;
• Clearly describe their purpose.

---

4. Third-Party Cookies

Some cookies on our Service are set by third parties. These are subject to the respective third party's cookie and privacy policies:

Third Party	Cookies Placed	Their Privacy Policy
Cloudflare, Inc.	__cf_bm, cf_clearance (see Section 3.1)	https://www.cloudflare.com/privacypolicy/
(No additional third-party analytics providers currently in use)	—	—

We do not control third-party cookies. Please review the relevant privacy policies for full information.

---

5. Cookie Consent

5.1. When you first visit https://cliptotext.ai, you will be presented with a cookie consent banner.

5.2. Strictly necessary cookies are placed without consent (as permitted by PECR).

5.3. Functional, analytics and marketing cookies will only be placed if you click "Accept" or select specific cookie categories.

5.4. You may change your preferences at any time by clicking the "Cookie Settings" link in the footer of any page.

A cookie consent management platform (CMP) must be implemented on the frontend before public launch. Recommended options: Cookiebot (€29/mo) or CookieYes (€20/mo). The CMP must: implement category-by-category consent, block non-essential cookies pre-consent, and record consent evidence with timestamp, version and user identifier.

---

6. Managing and Withdrawing Consent

6.1 Via Our Cookie Settings

You may update your cookie preferences at any time by clicking "Cookie Settings" in the website footer. Your consent preferences will be saved and applied immediately.

[ICO GUIDELINE: Withdrawing consent must be as easy as giving it. You must not rely on browser settings alone as the mechanism for withdrawal — ICO Cookies guidance, updated 2023.]

6.2 Via Your Browser Settings

Most web browsers allow you to control cookies through their settings. Common instructions:

Browser	How to manage cookies
Google Chrome	Settings → Privacy and Security → Cookies and other site data
Mozilla Firefox	Settings → Privacy & Security → Cookies and Site Data
Apple Safari	Preferences → Privacy → Manage Website Data
Microsoft Edge	Settings → Cookies and site permissions

Please note that disabling all cookies may affect the functionality of the Service, including your ability to log in.

6.3 Opt-Out Tools

For analytics tools that support it, you may opt out directly:

• As no third-party analytics cookies are currently in use, no separate opt-out link is required. Should an analytics tool be introduced, an opt-out mechanism will be added here.

---

7. Do Not Track

Some browsers include a "Do Not Track" (DNT) feature. We currently do not alter our data collection practices in response to DNT signals, as there is no common industry standard for DNT. If our approach changes, we will update this Policy.

---

8. Changes to This Policy

We may update this Cookie Policy from time to time. We will notify you of significant changes by updating the date at the top of this document and, where appropriate, via the cookie consent banner or email. We encourage you to review this Policy periodically.

---

9. Contact Us

If you have any questions about our use of cookies, please contact:

ALL-IN-ONE DIGITAL SOLUTIONS LTD 2nd Floor, Collage House, 17 King Edwards Road, Ruislip, Middlesex, HA4 7AE, United Kingdom Email: privacy@cliptotext.ai

You may also contact the ICO at www.ico.org.uk or on 0303 123 1113.

---

This document was prepared as a draft template and must be reviewed and validated by a qualified UK solicitor before publication or reliance. It does not constitute legal advice.