At a glance
- Four categories. We use strictly necessary, preference, analytics and product/session cookies — see the full list below.
- No advertising cookies today. We do not currently run third-party advertising or retargeting cookies; if that changes, we will update this page and ask for consent where required.
- You choose, except the essentials. You can block preference and analytics cookies in our consent banner or your browser; strictly necessary cookies cannot be switched off without breaking the site.
- A few third parties set their own. Google sign-in, Vapi's in-browser call widget and our embedded demo widget may each set cookies under their own privacy terms.
- Local storage, too. The dashboard uses browser local storage, not just cookies, to remember things like your last-viewed tab.
- We honour your signals where we can. See Do Not Track and Global Privacy Control.
What cookies are
Cookies are small text files that a website or app stores on your device when you visit it. They let a site remember who you are between page loads, keep you signed in, and remember choices you've made. "Similar technologies" covers local storage and session storage in your browser, pixels, and software libraries that store or read small amounts of information on your device in a comparable way. In this policy, we use the word "cookies" to mean all of these, unless we say otherwise.
1.1First-party vs. third-party
First-party cookies are set directly by Cypher LM when you visit cypherlm.com or use the app. Third-party cookies are set by another company whose technology is embedded in our pages — for example a video player, a sign-in button, or an in-browser calling widget.
1.2Session vs. persistent
Session cookies are temporary and are deleted automatically when you close your browser. Persistent cookies remain on your device for a set period — anywhere from a few hours to 13 months — or until you delete them yourself.
1.3Why we use them at all
A modern website and web application genuinely cannot work the way you expect without some form of client-side storage. Signing in and staying signed in as you move between pages, remembering that you already dismissed a banner, keeping an in-progress voice call connected while you navigate the dashboard, and knowing how many visitors found a particular page useful all depend on a small piece of data living on your device between requests. We try to use the minimum set of these technologies needed to run the site well, and we explain exactly what each one does in the table below rather than asking you to take our word for it.
1.4How this policy relates to our Privacy Policy
This Cookie Policy is a companion to, not a substitute for, our Privacy Policy. The Privacy Policy explains, among other things, why we collect personal data and who we share it with; this policy focuses specifically on the mechanics of cookies and similar technologies — which ones exist, what each is for, and how you can control them. Where a cookie collects personal data (for example, an analytics identifier that is combined with your IP address), that collection is also governed by the Privacy Policy's rules on legal basis, retention and your rights.
1.5Who this policy covers
This policy applies to anyone who visits cypherlm.com or signs in to the Cypher LM dashboard, whether or not you have a paid account. If your business is a Customer and your Callers interact with your Cypher V agent over the phone, this Cookie Policy does not apply to that phone call — phone calls do not use browser cookies. Any web-based interaction your Callers have, such as filling out a web form that triggers a callback, is covered by this policy in the same way as any other visit to a Cypher LM–hosted page.
Categories of cookies we use
Key point: only strictly necessary cookies are required to make the site work; everything else is there to make it work better, and you can turn it off.
| Category | What it does | Can you turn it off? |
|---|---|---|
| Strictly necessary | Keeps you signed in, protects forms against abuse, balances load across our servers, and remembers your cookie choices. | No — the Services will not function properly without these. |
| Preferences | Remembers interface choices such as dismissed banners, light/dark theme, and language. | Yes, through our consent banner or your browser settings. |
| Analytics and performance | Helps us understand how visitors use our pages — which pages are viewed, how long for, and where errors occur — generally in aggregated form. | Yes, through our consent banner or your browser settings. |
| Product and session | Keeps the dashboard, widgets and in-browser calling features working correctly during an active session. | Mostly no, while you are actively using those features — turning them off mid-session may break the feature. |
| Marketing | Not currently used. We do not run third-party advertising or retargeting cookies on cypherlm.com at this time. | N/A — none are set. |
If we introduce marketing cookies in the future — for example to measure a specific ad campaign — we will update this policy, add them to the cookie list below, and ask for your consent through the banner before setting them on your device where the law requires it.
2.1How our consent banner works
On your first visit to cypherlm.com, a banner asks you to accept all cookies, reject all non-essential cookies, or open detailed settings to choose category by category. Your choice is itself remembered using a strictly necessary cookie (clm_cookie_consent, listed in the table below) so that we do not ask you again on every page load. If you clear your cookies, change browsers, or switch devices, you will be asked again, because we have no way to recognise you without that cookie. You can reopen the settings panel at any time using the "Cookie preferences" link in the website footer, and changes you make there take effect immediately for cookies not yet set, though cookies already placed on your device may need to be cleared manually through your browser to remove them fully.
2.2What happens if you do not make a choice
If you close the banner without making an explicit choice (for example by navigating away), we treat that the same as a rejection of non-essential cookies in jurisdictions where opt-in consent is required, and we set only strictly necessary cookies until you make an active choice.
Cookie list
This table lists the specific cookies and similar technologies we and our embedded providers use. Exact names can vary slightly as we update the site, but this reflects the current set.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
clm_session | Cypher LM (first-party) | Session token that keeps you signed in to your account and workspace. | Session, or up to 30 days with "stay signed in" | Strictly necessary |
clm_csrf | Cypher LM (first-party) | Protects forms and account actions against cross-site request forgery. | Session | Strictly necessary |
clm_cookie_consent | Cypher LM (first-party) | Remembers your cookie-consent preferences so we don't ask again on every visit. | 12 months | Strictly necessary |
clm_announcement_dismissed | Cypher LM (first-party) | Remembers that you closed the announcement bar so it doesn't reappear. | 30 days | Preferences |
clm_theme | Cypher LM (first-party) | Remembers your light/dark interface preference. | 12 months | Preferences |
clm_widget_session | Cypher LM (first-party) | Tracks the state of an active embedded demo or calling widget on the page. | Session | Product/session |
_ga, _ga_* | Google Analytics | Distinguishes visitors and sessions for aggregated website analytics. | Up to 13 months | Analytics |
_gid | Google Analytics | Distinguishes visitors for short-term analytics reporting. | 24 hours | Analytics |
g_state, __Secure-*FedCM* | Google Sign-In | Supports Google account sign-in and sign-up flows. | Session to 6 months, set by Google | Third-party, strictly necessary for that flow |
vapi_call_id | Vapi (embedded web-call widget) | Identifies an active in-browser voice call made through a Cypher V web widget. | Session | Third-party, product/session |
clm_ab_variant | Cypher LM (first-party) | Keeps you in a consistent version of the site when we run a design experiment. | 30 days | Analytics |
Where a cookie's duration says "session," it is removed automatically when you close your browser rather than sitting on your device for a fixed number of days. Where a provider (such as Google) sets its own cookie through an embedded sign-in button or analytics script, the duration and exact name are controlled by that provider and may change without notice on their side; the durations shown above reflect their published defaults as of the effective date of this policy.
Local storage used by the dashboard
In addition to cookies, the Cypher LM dashboard uses your browser's local storage to remember things that don't need to travel back to our servers on every request, such as your last-viewed tab or navigation group, the collapsed or expanded state of a sidebar section, draft text in a form you haven't submitted yet, and a locally cached copy of non-sensitive layout preferences. Local storage is not sent to us automatically; it stays on your device until you clear it or your browser's site data for cypherlm.com. Clearing your browser's site data for cypherlm.com will reset these preferences and may sign you out.
4.1What we deliberately keep out of local storage
We do not store full Call Data, transcripts, payment details or other sensitive account data in local storage. Where the dashboard needs that information to render a page, it is fetched from our servers over an authenticated, encrypted connection each time, rather than being cached indefinitely on your device. This limits what could be exposed if a device is shared, lost or compromised.
4.2Session storage
Some parts of the dashboard also use session storage, a close relative of local storage that is automatically cleared when you close the browser tab. We use it for short-lived state, such as keeping a multi-step setup wizard on the right step if you accidentally reload the page partway through.
Third-party cookies
Some features on our site and in the app rely on trusted third parties that may set their own cookies when you use them:
- Google sign-in — if you sign in or connect Google Workspace, Google may set cookies to support that authentication flow, governed by Google's own privacy policy.
- Vapi web calls — if you place or receive a call through an in-browser Cypher V widget, Vapi's infrastructure may set a cookie to maintain that call session.
- Embedded demo and widget — our website's live voice-agent demo and any embeddable chat or call widget may set first- or third-party cookies needed to keep that demo session working.
- Hosting and security providers — our infrastructure providers (including Amazon Web Services) may set technical cookies needed for load balancing, routing and abuse protection.
Each third party's use of cookies is governed by its own privacy and cookie policy. We do not allow any third party to use cookies set through our site to sell your personal data.
5.1Why these third parties are there
We embed Google sign-in and Vapi's calling widget because building and maintaining secure authentication and telephony infrastructure from scratch would be slower and less secure than using providers who specialise in it — the same reasoning that governs our choice of sub-processors generally, described in our Privacy Policy. We choose providers with strong security and privacy track records, and we review new embeds before adding them to the site.
How to control cookies
You can accept, reject or customise non-essential cookies using the consent banner shown on your first visit, and change your choice at any time from the cookie preferences link in our website footer.
You can also control cookies directly through your browser:
Most browsers also let you clear local storage through their site-data or site-settings screens. If you block strictly necessary cookies, core features such as signing in and placing in-browser calls will not work. Blocking preference or analytics cookies will not stop you using the Services, but some conveniences may be lost and we will have less information to improve the product.
6.1Mobile devices
If you access cypherlm.com or the dashboard through a mobile browser, the same browser-level controls generally apply; check your mobile browser's settings menu for cookie and site-data controls, which are usually found under privacy or site settings. If we release a dedicated mobile app in the future, that app's own privacy notice will describe any device-level identifiers it uses in place of browser cookies.
6.2Opting out of specific analytics providers
In addition to our own cookie banner, Google offers a browser add-on that opts you out of Google Analytics tracking across all websites that use it, available at Google's Analytics opt-out page. Using it will stop Google Analytics cookies from being used to measure your visits to cypherlm.com, in addition to any other sites you visit that use the same service.
Do Not Track and Global Privacy Control
Some browsers offer a "Do Not Track" setting, and some browsers and extensions send a Global Privacy Control (GPC) signal. Where we detect a GPC signal from your browser, we treat it as a valid request to opt out of any sale or sharing of your personal data on that browser, consistent with applicable law. We currently do not run cookies that would constitute a "sale" or "sharing" of personal data for cross-context advertising, so in practice this has no additional effect today, but we honour the signal and will continue to as our use of cookies evolves.
Legacy "Do Not Track" headers are not governed by a single legal standard and are not consistently honoured across the industry, including by many analytics and advertising providers. Where a provider we embed does not support Do Not Track, we cannot force it to; however, you can always fall back on the browser-level and category-level controls described in How to control cookies to achieve the same result.
IP addresses and similar identifiers
Separately from cookies, our servers and analytics providers log the IP address of each request to cypherlm.com and the app. We use IP addresses to secure our systems, detect abuse, derive an approximate country or city location for analytics, and support features such as call routing. IP addresses are retained only as long as needed for these purposes and are handled as personal data under our Privacy Policy.
If you use a VPN or proxy, the IP address we see will be the one assigned by that service rather than your own, which may affect the accuracy of any location-based features or analytics. We do not attempt to unmask a VPN or proxy connection, and using one does not affect your ability to use cypherlm.com or the app.
Intellectual property
Everything on cypherlm.com, including the site's code, design, layouts and the cookie-consent tooling itself, is the exclusive property of Cypher LM (Private) Limited. This policy governs cookies only; it does not grant any right to copy, scrape or reuse our site or product. See the Intellectual property and brand protection section of our Terms of Service for the full terms, which we enforce strictly.
Changes to this Cookie Policy
We may update this Cookie Policy when we change the cookies or similar technologies we use, add a new embedded third party, or when the law changes. We will post the updated version on this page and change the effective date above. Where required, we will ask for your renewed consent before using any new non-essential cookie.
Contact us
Questions about our use of cookies? Contact us. We reply within 24 hours on business days.
| What it's about | |
|---|---|
| Legal notices, privacy and data-rights requests, intellectual-property concerns | contact@cypherlm.com |
| Your account, billing, technical help, security and abuse reports | support@cypherlm.com |
| Plans, pricing, enterprise agreements and use-case approvals | sales@cypherlm.com |
| Careers and working with our team | people@cypherlm.com |
| Anything else | info@cypherlm.com |
Questions about this document? Our team replies within 24 hours on business days.
Email contact@cypherlm.com© 2026 Cypher LM (Private) Limited. All rights reserved. · CLM-CP-2026-V2