GitScrum Cookie Policy

1. Introduction

GitScrum ("we," "us," "our," "Company") uses cookies and similar tracking technologies on our website (https://gitscrum.com), web application, mobile applications, and related services (collectively, the "Platform") to provide, improve, protect, and promote our services.

This Cookie Policy explains what cookies are, how we use them, what types of cookies we use, your choices regarding cookies, and how you can manage your cookie preferences. This policy should be read in conjunction with our Privacy Policy and Terms and Conditions.

BY USING OUR PLATFORM, YOU CONSENT TO THE USE OF COOKIES AS DESCRIBED IN THIS COOKIE POLICY, SUBJECT TO YOUR PREFERENCES AND APPLICABLE LEGAL REQUIREMENTS.

2. What Are Cookies?

Cookies are small text files that are placed on your computer, smartphone, tablet, or other device when you visit a website or use an application. Cookies contain information that is transferred to your device's hard drive and allow websites to recognize your device, remember your preferences, and improve your user experience.

Cookies typically contain:

• A unique identifier (cookie ID)
• The name of the website that placed the cookie
• An expiration date (how long the cookie remains on your device)
• A value (information stored by the cookie)

Cookies can be set by the website you are visiting ("first-party cookies") or by third-party services that provide functionality on that website ("third-party cookies").

3. Why We Use Cookies

GitScrum uses cookies for the following purposes:

3.1 Essential Functionality

To enable core platform features, authentication, security, and basic operations that are necessary for the Platform to function properly.

3.2 Performance and Analytics

To understand how users interact with our Platform, analyze usage patterns, identify technical issues, and improve overall performance and user experience.

3.3 Personalization

To remember your preferences, settings, language choices, and customizations to provide a personalized experience.

3.4 Security and Fraud Prevention

To protect against fraudulent activity, unauthorized access, security threats, and to verify user identity.

3.5 Marketing and Advertising

To deliver relevant advertisements, track marketing campaign effectiveness, and understand user interests (only with your explicit consent).

4. Types of Cookies We Use

We use the following categories of cookies on our Platform:

5. Other Tracking Technologies

In addition to cookies, we may use similar tracking technologies:

5.1 Web Beacons (Pixels)

Small invisible images embedded in web pages or emails that track whether you have viewed the content, clicked links, or opened emails.

5.2 Local Storage

Browser storage mechanisms (localStorage, sessionStorage) that store data locally on your device to enable offline functionality and improve performance.

5.3 Session Recording and Heatmaps

Technologies like Hotjar or similar tools that record user sessions (mouse movements, clicks, scrolling) to analyze user behavior and improve UX. These tools require explicit consent and mask sensitive information.

5.4 Device Fingerprinting

Collecting device and browser characteristics (screen resolution, installed fonts, browser plugins) to create a unique device identifier. We do not currently use device fingerprinting.

6. Cookie Consent and Your Rights

6.1 GDPR and ePrivacy Directive Compliance

As a company based in Europe, GitScrum complies with the General Data Protection Regulation (GDPR) and the ePrivacy Directive (Cookie Directive).

Key Principles:

• Prior Consent Required: We obtain your explicit consent before placing non-essential cookies on your device
• No Pre-Checked Boxes: Cookie consent is opt-in only; pre-checked boxes are not used
• Granular Control: You can accept or reject specific cookie categories independently
• Easy Withdrawal: You can withdraw consent as easily as you gave it
• Consent Records: We maintain records of your consent choices for audit purposes

6.2 Cookie Banner and Consent Management

When you first visit GitScrum, you will see a cookie consent banner that explains our use of cookies and requests your consent.

The banner provides:

• Clear information about cookie categories
• Options to "Accept All," "Reject Non-Essential," or "Customize" preferences
• A link to this Cookie Policy for detailed information
• Equal prominence for "Accept" and "Reject" buttons (no dark patterns)

Cookie Blocking Before Consent: Non-essential cookies are blocked until you provide consent. Only strictly necessary cookies are set automatically.

6.3 How to Manage Cookie Preferences

You can manage your cookie preferences at any time using the following methods:

Method 1: Cookie Preference Center

• Click the "Cookie Preferences" link in the footer of any GitScrum page
• Access your cookie settings through Account Settings ? Privacy ? Cookie Preferences
• Adjust your preferences for each cookie category
• Save your updated preferences

Method 2: Browser Settings

You can configure your web browser to block or delete cookies. Instructions for popular browsers:

• Google Chrome: Settings ? Privacy and Security ? Cookies and site data
• Mozilla Firefox: Settings ? Privacy & Security ? Cookies and Site Data
• Safari: Preferences ? Privacy ? Cookies and website data
• Microsoft Edge: Settings ? Cookies and site permissions ? Cookies and site data

Note: Blocking strictly necessary cookies may prevent you from accessing certain features or using the Platform.

Method 3: Third-Party Opt-Out Tools

• Google Analytics Opt-Out: Install the Google Analytics Opt-out Browser Add-on
• Network Advertising Initiative (NAI) Opt-Out: Visit NAI Opt-Out Page
• Digital Advertising Alliance (DAA) Opt-Out: Visit DAA WebChoices
• European Interactive Digital Advertising Alliance (EDAA): Visit Your Online Choices

7. Session-Based vs Persistent Cookies

8. Third-Party Cookies and Services

GitScrum integrates with third-party services that may set their own cookies on your device. We do not control these third-party cookies and recommend reviewing the privacy policies of these services:

Third-Party Services We Use:

Note: When you enable third-party integrations within your GitScrum account, those services may set their own cookies subject to their respective privacy policies.

9. International Data Transfers

Some cookies and tracking technologies used on the Platform may result in the transfer of your personal data to countries outside the European Economic Area (EEA), including the United States.

Safeguards for International Transfers:

• We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission
• We work only with third-party service providers that comply with GDPR requirements for international data transfers
• Where possible, we enable data localization and IP anonymization features

For more information about international data transfers, please refer to our Privacy Policy.

10. Children's Privacy

GitScrum's Platform is not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children through cookies or other tracking technologies.

If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

11. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs.

When we make changes:

• We will update the "Last Updated" date at the top of this policy
• Material changes will be communicated via email or prominent notice on the Platform
• Your continued use of the Platform after changes take effect constitutes acceptance of the updated Cookie Policy

We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.

Previous versions of this Cookie Policy are available upon request by contacting privacy[at]gitscrum.com.

12. Cookie Audit and Transparency

GitScrum is committed to transparency regarding our use of cookies. We conduct regular cookie audits to:

• Identify all cookies and tracking technologies used on the Platform
• Verify that cookies are properly categorized
• Ensure that consent mechanisms are functioning correctly
• Remove or update outdated cookies

You can request a copy of our most recent cookie audit report by contacting privacy[at]gitscrum.com.

13. Do Not Track (DNT) Signals

Some web browsers offer a "Do Not Track" (DNT) signal that requests websites not to track your online activity. GitScrum currently does not respond to DNT signals because there is no universally accepted standard for how websites should respond to such signals.

However, you can manage your cookie preferences through the methods described in Section 6.3 of this policy.

14. Cookie Retention Periods

The table below summarizes the retention periods for different cookie categories:

Note: Even after deletion, cookies may be re-set if you continue to use the Platform and have given consent.

15. Your Data Protection Rights

In addition to managing cookie preferences, you have broader data protection rights under GDPR:

• Right to Access: Request information about the personal data we process through cookies
• Right to Rectification: Correct inaccurate data collected via cookies
• Right to Erasure: Request deletion of data collected through cookies
• Right to Restrict Processing: Limit how we process cookie data
• Right to Object: Object to processing based on legitimate interests (for analytics/marketing cookies)
• Right to Withdraw Consent: Withdraw cookie consent at any time

To exercise these rights, please contact our Data Protection Officer at: dpo[at]gitscrum.com

For more information about your data protection rights, please refer to our Privacy Policy.

16. Contact Information

If you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies, please contact us:

Response Time: We aim to respond to all cookie-related inquiries within 5 business days.

17. Supervisory Authority

If you are located in the European Economic Area (EEA) and believe that our use of cookies violates your data protection rights, you have the right to lodge a complaint with your local data protection supervisory authority.

18. Glossary of Cookie Terms