Cookie Policy
Last updated: October 31, 2025
1. Introduction
This Cookie Policy explains how ICM AS ("ICM", "we", "us", or "our") uses cookies and similar tracking technologies on the Whistla website (whistla.io) and Platform.
This Policy should be read together with our Privacy Policy, which explains how we collect, use, and protect your personal data.
2. What Are Cookies?
Cookies are small text files that are placed on your device (computer, smartphone, tablet) when you visit a website. Cookies help websites:
- Remember your preferences and settings
- Understand how you use the website
- Improve website performance
- Provide personalized content
Similar Technologies include:
- Local Storage - Data stored in your browser
- Session Storage - Temporary data cleared when you close your browser
- Web Beacons - Small transparent images that track page views
- Pixels - Tracking codes embedded in emails or pages
3. Why We Use Cookies
3.1 Essential Cookies (No Consent Required)
These cookies are strictly necessary for the Platform to function. You cannot opt out of these cookies without losing essential functionality.
Examples:
- Authentication - Remember that you're logged in
- Session Management - Maintain your session across pages
- Security - Prevent cross-site request forgery (CSRF) attacks
- Load Balancing - Distribute traffic across servers
3.2 Functional Cookies (Consent Required)
These cookies enhance functionality and remember your preferences.
Examples:
- Language Preference - Remember your selected language
- Theme - Remember dark mode vs. light mode preference
- Layout Preferences - Remember sidebar collapsed/expanded
- Notification Settings - Remember your notification preferences
3.3 Analytics Cookies (Consent Required)
These cookies help us understand how you use the Platform so we can improve it.
Provider: We use Vercel Analytics (first-party, privacy-focused analytics)
4. Cookies We Use
4.1 First-Party Cookies (Set by Whistla)
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| sb-access-token | Supabase authentication | Essential | 1 hour |
| sb-refresh-token | Session refresh | Essential | 7 days |
| whistla-session | Session management | Essential | 8 hours |
| whistla-lang | Language preference | Functional | 1 year |
4.2 Third-Party Cookies
| Service | Purpose | Type | Privacy Policy |
|---|---|---|---|
| Vercel Analytics | Website analytics | Analytics | View Policy |
| Stripe | Payment processing | Essential | View Policy |
5. How to Manage Cookies
You have several options to control cookies:
5.1 Cookie Consent Banner
When you first visit whistla.io, we show a cookie consent banner where you can:
- Accept All - Accept all cookies (essential, functional, analytics)
- Reject Non-Essential - Accept only essential cookies
- Customize - Choose which types of cookies to accept
5.2 Browser Settings
All modern browsers allow you to control cookies. Instructions vary by browser:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy
- Microsoft Edge: Settings → Privacy, search, and services → Cookies
6. Your Rights
Under GDPR, you have the following rights regarding cookies and tracking:
- Right to Withdraw Consent - Withdraw consent for non-essential cookies anytime
- Right to Object - Object to analytics cookies
- Right to Erasure - Request deletion of data collected via cookies
- Right to Data Portability - Request copy of data collected via cookies
To exercise your rights, email privacy@whistla.io
7. Contact Us
If you have questions about this Cookie Policy or how we use cookies:
Email: privacy@whistla.io
Data Protection Officer: dpo@whistla.io
Postal Address:
ICM AS
Skur 35, Akershusstranda 15
0150 Oslo, Norge
Platform IP Owner: SAAZLY FZCO (License No. 23488, Dubai, UAE)
Company: ICM AS | Organization Number: 995 372 304 | VAT Number: NO 995 372 304 MVA
ICM AS distributes the Whistla platform in Europe. The platform is owned and developed by SAAZLY FZCO and licensed to ICM AS.