Cookie Policy
Effective date: 16 October 2026
Version: 2.1
This Cookie Policy explains which cookies and similar technologies (such as local storage) CyberLab.Team OÜ uses on the Website cyberlab.team and in our client portals on *.cyberlab.team (the "Client Cabinet"). It is part of our Privacy Policy. Contact: info@cyberlab.team. The language rules of our Terms of Service apply (for business clients the English version prevails; for consumers the language version in which the contract was concluded applies).
1. Website cyberlab.team
1.1. Always active (no consent needed)
| Name / technology | Provider | Purpose | Duration |
|---|---|---|---|
cookie-consent-v1 (local storage) |
CyberLab.team | Remembers your choice in the cookie banner and its version | 365 days |
Cloudflare security (for example __cf_bm) |
Cloudflare, Inc. | Protection against bots and attacks | Up to 30 minutes |
| Cloudflare Turnstile (on forms) | Cloudflare, Inc. | Checks that a form is sent by a person, not a bot; processes your IP address and browser data. Cloudflare acts for us for this check and, for improving its bot detection, as an independent controller under its Turnstile privacy policy | During the check |
| Cloudflare Web Analytics | Cloudflare, Inc. | Basic visit statistics; no cookies and no local storage | — |
1.2. Only with your consent
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_B41039S08F |
Google Ireland Ltd. (Google Analytics 4) | Measuring how the Website is used; with Google's advertising features (Google signals, audiences) also measuring and improving our own advertising in Google | Up to 2 years |
Until you give consent, Google Analytics is not loaded and these cookies are not set; we signal Google that consent for analytics and advertising is denied (Google Consent Mode). If you click "Accept all", you consent to both analytics and Google's advertising features described above; if you click "Reject all", neither is loaded. In "Cookie settings" you can instead choose them separately: Analytics (Google Analytics measurement) and Advertising (Google's advertising features: Google signals, audiences). We do not use Meta, LinkedIn or other advertising pixels.
1.3. Embedded videos
Videos from YouTube or Vimeo are loaded only when you click on them; before that, no request is sent to the video provider. After you click, the provider receives your IP address and browser data and may set its own cookies under its own policy.
2. Client Cabinet (*.cyberlab.team)
The Client Cabinet uses only technologies that are strictly necessary for signing in and security. It has no analytics or advertising cookies and therefore shows no cookie banner.
| Name / technology | Purpose | Duration |
|---|---|---|
__Host-pinmap_session |
Keeps you signed in (opaque session identifier) | Up to 7 days |
__Host-pinmap_csrf |
Protection against cross-site request forgery | Session |
pinmap_oauth_state |
Links a "Sign in with Google" attempt to your browser | About 10 minutes |
| Local storage (language, technical reload markers, one-time sign-in data) | Remembers your language and supports page updates and sign-in | Until you clear it |
| Cloudflare security, Cloudflare Turnstile (sign-in) | As in Section 1.1 | As in Section 1.1 |
Pages where you sign in with Google or pay (Stripe, for example on pay.cyberlab.team) are provided by Google or Stripe, who set their own strictly necessary cookies under their own policies.
3. Your choices
You can change or withdraw your consent at any time, for analytics and advertising separately, via "Cookie settings" in the Website footer. When you withdraw consent, Google Analytics stops and its cookies are deleted. You can also block or delete cookies in your browser; if you block strictly necessary cookies, signing in to the Client Cabinet will not work.
4. Our clients' websites
This policy covers only our own websites. When we work on our clients' websites, advertising accounts or publisher accounts, each client is responsible for the cookie banner and consent of its own visitors (Terms of Service, Annex C).
5. Changes
If we add a technology that requires consent, we will update this policy and ask for your consent again.