Cookies

1. What this notice covers

This notice is from Qualsis, LLC ("Qualsis", "we"), 3540 Toringdon Way, Suite 200,
Charlotte, NC 28277, USA. It explains what we store on your device - cookies and
similar technologies such as localStorage, sessionStorage, and pixels (together,
"cookies") - when you use:

our websites - qualsis.com and qortexos.com (qoherenceai.com will be added
to this notice before it goes live); and
the QortexOS application, including its public sign-up flow.

It also explains how we ask for your consent, how to change your mind, and how we
keep proof of the choice you made. It works together with our Privacy Policy
(section 10 below).

Different places regulate cookies differently. Some allow analytics or preference
cookies on an opt-out basis; EEA rules generally require prior consent unless a
narrow exemption applies. We apply the stricter standard everywhere:

Nothing optional before you choose. We currently use only cookies and
similar technologies that are necessary for requested services or otherwise
exempt from prior consent, as described below. We do not store or read
anything non-essential on your device before you have made a recorded choice.
Wherever you are, we ask for your consent before placing non-essential
cookies.
Strictly necessary cookies are the exception. These are always active:
they are necessary for the services you request or otherwise exempt from
prior consent (sign-in sessions, security, fraud prevention, form protection,
and the cookie that remembers the choices you make here).
Accepting and declining are equally easy. The first thing you see offers
"Accept all" and "Reject all" side by side, with the same prominence, plus a
"Manage choices" path to per-category settings.
Your choice is enforced. Tags and scripts in a category you declined or
withdrew do not fire. On withdrawal, non-essential tags stop firing immediately.
You can change your mind at any time through the preference center on this
page, reachable from the "Cookie preferences" link in the footer of every page.

3. The categories we use

Category	What it does	Basis
Strictly necessary	Makes the site or product work at all: sign-in sessions, security, fraud prevention, form protection, and the cookie that remembers the choices you make here.	Always active; necessary for the services you request or otherwise exempt from prior consent. Turning these off would break the service.
Preferences	Remembers settings you choose, such as language and display options, so you do not have to set them again.	Your consent.
Analytics	Measures how our sites are used - which pages are read, where visitors run into problems - so we can improve them.	Your consent.
Personalisation	Tailors content on our sites to what you have shown interest in.	Your consent.
Marketing	Supports Qualsis marketing communications and measures whether they were useful.	Your consent.

Not every category is in use on every surface. The tables below say exactly what
is set where. The QortexOS application currently uses no analytics,
personalisation, or marketing cookies of any kind (section 5).

4. Cookies on our websites

The table below lists every cookie our websites set, verified by a scan of the
live sites.

Name	Set by	Purpose	Category	Duration
qusp_consent_v2	Qualsis	Remembers the cookie choices you made so we do not re-ask on every page	Strictly necessary	6 months
_ga	Google Analytics (script loaded by our sites)	Tells returning browsers apart using a random identifier so visits and pages read can be counted; contains nothing that identifies you by name	Analytics - set only after you accept analytics	13 months (400 days)
_ga_6D8WNPHWS9 (qualsis.com); _ga_VTTWFV89ST (qortexos.com)	Google Analytics (script loaded by our sites)	Keeps the measurement session for the site's own analytics property while you browse	Analytics - set only after you accept analytics	13 months (400 days)

Server logs. Like almost every website, our web servers keep standard access
logs (IP address, page requested, browser type, timestamp) for security and
operations. These are not cookies; we note them here for completeness. Website
server logs are ordinarily retained for up to 90 days and then automatically
deleted or anonymized, unless a longer period is reasonably necessary to
investigate a security incident, prevent abuse, resolve a service problem, or
comply with law.

5. Cookies and storage in QortexOS

QortexOS is a business application. What it stores in your browser is limited to
making the application work and remembering your own settings.

Cookies:

Name	Purpose	Duration	Set by	Category
qos_session	Keeps you signed in. An opaque, random session identifier - it reveals nothing about you by itself and contains no token readable by page scripts.	30 minutes, extended while you are active	Qualsis	Strictly necessary
qos_csrf	Protects forms and requests against cross-site request forgery.	30 minutes	Qualsis	Strictly necessary
qosp-locale	Remembers a display language you deliberately chose. Never set automatically: until you choose, QortexOS follows your browser's language setting without storing anything on your device. If you are signed in, your choice is saved in your account profile on our servers instead of in this cookie.	Session; up to 12 months only if you choose "Remember this language on this device"	Qualsis	Preferences. The session-only choice runs without prior consent where applicable law exempts settings you deliberately select; the "remember" option is set only with your consent, which you give by selecting it.
sidebar_state	Remembers whether you left the navigation sidebar open or closed. Written only when you toggle it. If you are signed in, your choice is saved in your account profile on our servers instead of on your device.	Session; kept on this device beyond the session only if you choose that in Preferences (persistence period set at implementation and re-verified before publication)	Qualsis	Preferences. The session-only choice runs without prior consent where applicable law exempts settings you deliberately select; storage beyond the session is set only with your consent, which you give by choosing it in Preferences.

Browser storage (localStorage / sessionStorage):

Name	Purpose	Duration	Category
theme	Your light/dark/system display choice. Written only when you use the theme toggle. If you are signed in, your choice is saved in your account profile on our servers instead of in browser storage.	Session; kept on this device beyond the session only if you choose that in Preferences	Preferences. The session-only choice runs without prior consent where applicable law exempts settings you deliberately select; storage beyond the session is set only with your consent, which you give by choosing it in Preferences.
qos-signup-checkout	Lets the sign-up flow resume if the page reloads mid-checkout. Never contains your password.	Cleared when the tab closes	Strictly necessary
qos_impersonation_token, qos_impersonation_session, qos_original_session_active	Internal Qualsis support sessions only. Never set for customers or their users.	Cleared when the tab closes	Strictly necessary (internal)

What QortexOS does not do. The product sets no analytics, marketing, or
advertising storage of any kind, loads no third-party analytics or advertising
scripts, and never places authentication tokens where page scripts can read
them. The product includes a first-party usage-telemetry collector that sends
operational events to Qualsis only; it stores nothing on your device beyond the
qos_session cookie listed above.

6. Third-party cookies

On the QortexOS sign-up flow, one third party sets cookies today:

Stripe, LLC (payment provider). The QortexOS sign-up flow loads Stripe.js
only when you reach the payment step. At the payment step, Stripe may set
cookies used to process the transaction and prevent fraud. We treat these
cookies as necessary for secure checkout where permitted by applicable law.
Stripe's published cookie inventory currently documents three such cookies:
stripe_mid (1 year), stripe_sid (30 minutes), and m (2 years). These
are governed by Stripe's own privacy notice.

Our websites set no third-party cookies.

We will update this notice before any other third-party cookie appears on our
surfaces.

7. How to make and change your choices

The preference center on this page lets you make and change granular
category choices (preferences, analytics, personalisation, marketing) at any
time. The "Cookie preferences" link in the footer of every page reopens it.
Withdrawing is as easy as accepting. Turn a category off and it takes
effect immediately: non-essential tags in that category stop firing, and we
expire or delete the cookies we set in it where technically feasible.
We re-ask periodically. We remember your choice for six months, whether
you accept or reject, and ask again sooner if our purposes or the technologies
involved materially change.
Browser controls. You can also block or delete cookies in your browser
settings; doing so may break parts of our services, including sign-in.

8. Global Privacy Control and Do Not Track

Global Privacy Control (GPC). Because nothing non-essential runs without
your consent, a browser that never opts in is never tracked, whatever signals
it sends. In addition, where your state's law treats GPC as a formal opt-out
(California, for example), we honor it: if your browser sends the GPC signal,
we treat it as a request to opt out of any "sale" or "sharing" of your personal
information as those terms are defined there, and we record it like any other
choice. We never treat the signal, or its absence, as consent, and a later
contrary choice is accepted only through a separate affirmative-consent
process permitted by applicable law. Where California's rules apply
and we have processed your signal as an opt-out, the preference center on this
page shows that status ("Opt-Out Request Honored").
Do Not Track (DNT). Older DNT browser signals have no settled legal
meaning. We do not treat DNT as consent to anything; under our consent-first
model, a DNT browser that never opts in is treated exactly like one that
declined.

California residents: the preference center on this page is also the mechanism
for opting out of any sharing of identifiers for cross-context behavioral
advertising described in Privacy Policy section 16.2.

9. Our record of your choice

When you make or change a choice, we keep a record so we can prove we respected
it: a random consent identifier (we do not need your name for this), the time,
the version of the banner text and of this notice you were shown, and your
per-category choices. Withdrawals are recorded the same way, as a new entry -
never by erasing the old one.

We keep these records while your choice remains in force and for up to seven
years after you change or withdraw it, deleting or de-identifying them earlier
once they are no longer needed to demonstrate your consent.

10. This notice and our Privacy Policy

This notice covers what we store on your device. What personal data we collect,
why, how long we keep it, and your rights are described in our Privacy Policy at
https://qualsis.com/legal/privacy - see in particular Section 13 (Cookies and
tracking technologies) and Section 16 (Your rights and choices).

11. Changes to this notice

When we change this notice, we update its version and the effective date shown below.
If a change is material - a new category, a new third party, a new purpose,
or a material change to the technologies involved - we
re-ask for your consent rather than relying on the old choice.

12. Contact

Questions about cookies or this notice: use the Qualsis Privacy contact form.

13. About this version

This is version 1.0.1 of this notice. It replaces version 1.0.0. The only change is the address of the contact forms. The effective date shown below is the date this version started applying. Archived versions and a change log of material updates are kept at https://qualsis.com/legal/trust/changelog.

Cookie Notice