Back to Legal Documents

Cookie Policy

Aplas Pty Ltd | ABN 17 625 144 461

Version 1.0 — February 2026

https://aplas.com

1. Introduction

This Cookie Policy explains how Aplas Pty Ltd (ABN 17 625 144 461) ("we", "us", "our") uses cookies and similar tracking technologies when you visit our website at https://aplas.com and use the Aplas platform.

This Cookie Policy forms part of our Terms of Service and should be read alongside our Privacy Policy, both of which are available at https://aplas.com.

By continuing to use our website and platform, you consent to the use of cookies in accordance with this policy. You may withdraw or manage your consent at any time as described in section 6 below.

2. What Are Cookies?

Cookies are small text files that are placed on your computer or device by a website when you visit it. They are widely used to make websites work efficiently, to provide a better user experience, and to provide information to the owners of the site.

First-party cookies are set by the website you are visiting (in this case, aplas.com) and can only be read by that site. Third-party cookies are set by a domain other than the website you are visiting and are typically used by third-party services integrated into the site, such as authentication, payment, or support services.

In addition to cookies, we may use similar technologies such as web beacons, pixel tags, and local storage to collect information about how you interact with our website and platform. References to "cookies" in this policy include these similar technologies unless the context requires otherwise.

3. Categories of Cookies

We classify the cookies used on our website and platform into the following categories:

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of our website and platform. They enable core functionality such as user authentication, session management, security, and payment processing. Without these cookies, the services you have requested cannot be provided. These cookies do not require your consent under applicable law.

3.2 Functional Cookies

These cookies enable enhanced functionality and personalisation, such as remembering your preferences, language settings, and support chat history. They may be set by us or by third-party providers whose services we have integrated into our platform. If you do not allow these cookies, some or all of these features may not function properly.

3.3 Analytics and Performance Cookies

These cookies collect information about how visitors use our website and platform, such as which pages are visited most often and whether visitors encounter error messages. The information collected is aggregated and used to improve how our website and platform work. These cookies require your consent before being set.

3.4 Marketing and Targeting Cookies

These cookies are used to track visitors across websites and to display advertisements or content that is relevant to you. They may be set by us or by third-party advertising partners. These cookies require your explicit consent before being set.

4. Cookies We Use

The following tables set out the cookies and similar technologies used on our website and platform. We review and update this list periodically; the most current version can be found by selecting "Manage Cookies" in the footer of any page on aplas.com.

4.1 Strictly Necessary Cookies

Cookie Name Provider Purpose Duration Type
auth0.is.authenticated Auth0 Indicates whether the user is currently authenticated Session First-party
appSession / a0:session Auth0 Stores encrypted session data for authenticated users Session First-party
csrf_token Aplas Prevents cross-site request forgery attacks Session First-party
session_id Aplas Identifies the user's session for platform functionality Session First-party
__stripe_mid Stripe Device identifier used for payment fraud prevention 1 year Third-party
__stripe_sid Stripe Session identifier used for payment processing and fraud detection 30 minutes Third-party

4.2 Functional Cookies

Cookie Name Provider Purpose Duration Type
intercom-session-* Intercom Maintains support chat session continuity so conversations are preserved between page views 7 days First-party
intercom-device-id-* Intercom Identifies the device for support chat history and personalisation 7 days First-party
user_preferences Aplas Stores user interface preferences such as theme, language, and layout settings 1 year First-party

4.3 Analytics and Performance Cookies

Cookie Name Provider Purpose Duration Type
mailchimp_landing_site Mailchimp Identifies the landing page a visitor arrived on for campaign performance analysis 1 year First-party
mailchimp_campaign_id Mailchimp Tracks which email campaign referred the visitor to measure campaign effectiveness Session First-party

4.4 Marketing and Targeting Cookies

At present, we do not use marketing or targeting cookies on our website or platform. If this changes in the future, we will update this Cookie Policy and seek your consent before setting any such cookies.

Note: The cookie names listed above are representative of the cookies typically set by each service. Exact cookie names may vary depending on configuration and updates by third-party providers. Any cookies whose purpose has not been identified are classified as "Unclassified" and will be investigated and categorised as soon as practicable.

5. Other Tracking Technologies

5.1 Web Beacons

We may use web beacons (also known as pixel tags or clear GIFs) in our emails and on our website. These are small transparent image files that allow us to track whether an email has been opened or whether a particular page has been visited. Web beacons do not store information on your device but may work in conjunction with cookies. Disabling cookies may impair the functioning of web beacons.

5.2 Local Storage

We may use browser local storage and session storage to store non-sensitive data that improves your experience, such as temporary UI state. Local storage data remains on your device until you clear your browser data.

5.3 Server Logs

Our servers automatically record certain information when you access our website, including your IP address, browser type, referring URL, and the date and time of your visit. This information is used for security monitoring, performance analysis, and troubleshooting, and is not linked to cookies.

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You can change your preferences at any time by selecting "Manage Cookies" in the footer of any page on aplas.com.

6.2 Browser Settings

Most web browsers allow you to control cookies through their settings. You can typically set your browser to block or delete cookies, or to notify you when a cookie is being set. The method for managing cookies varies between browsers; please refer to your browser's help documentation for instructions.

Please note that blocking or deleting cookies may affect the functionality of our website and platform. In particular, if you block strictly necessary cookies, you may not be able to log in or use core features of Aplas.

Some third-party services used on our platform provide their own opt-out mechanisms:

  1. Intercom: You can manage Intercom cookies through our cookie consent tool. When consent is not granted, the Intercom Messenger will load but will not set cookies.

  2. Stripe: Stripe cookies are strictly necessary for payment processing and fraud prevention. They are only set when you initiate a payment transaction.

We rely on the following legal bases for placing cookies on your device:

Strictly Necessary Cookies: These cookies are placed under our legitimate interest in providing a secure and functional website and platform. They do not require your consent under the ePrivacy Directive, UK PECR, or equivalent Australian requirements.

Functional, Analytics, and Marketing Cookies: These cookies are placed on the basis of your consent, which you may give or withdraw at any time through our cookie consent tool. Your consent is freely given, specific, informed, and unambiguous, in accordance with the EU GDPR, UK GDPR, and applicable Data Protection Laws.

Where we process personal data collected via cookies, our Privacy Policy sets out the full details of our processing activities, your rights as a data subject, and how to exercise those rights.

8. Third-Party Services

Some cookies on our website are set by third-party services that we use to operate and improve our platform. We have no direct control over the cookies set by these third parties. The third-party services we use, and links to their respective privacy policies, are set out below:

Service Purpose Privacy Policy
Auth0 User authentication https://auth0.com/privacy
Stripe Payment processing https://stripe.com/privacy
Intercom Customer support chat https://www.intercom.com/legal/privacy
Mailchimp Email marketing analytics https://mailchimp.com/legal/privacy/

We encourage you to review the privacy policies of these third-party services for further information about their data practices.

9. Data Retention

Cookies have varying lifespans. Session cookies are deleted when you close your browser. Persistent cookies remain on your device for a set period or until you delete them. The retention period for each cookie is set out in the tables in section 4 above.

Personal data collected via cookies is retained in accordance with the retention periods described in our Privacy Policy.

10. International Data Transfers

Some of the third-party services that set cookies on our website are based outside Australia and the European Economic Area (in particular, in the United States). Where personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with the applicable Data Protection Laws, as described in our Privacy Policy and Terms of Service.

11. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. Where we make material changes, we will notify you by updating the date at the top of this policy and, where appropriate, by providing additional notice (such as through our cookie consent banner or by email).

We encourage you to review this Cookie Policy periodically for the latest information on our use of cookies.

12. Contact Us

If you have any questions about our use of cookies or this Cookie Policy, please contact us at:

Aplas Pty Ltd

Level 17, 31 Queen Street, Melbourne VIC 3000, Australia

Email: dpo@aplas.com

Website: https://aplas.com

Version History

Version Date Changes
V1.00 February 2026 Initial release