Cookie Policy

Our approach

GONATURELLE customers test agents that handle patient records, credit files and privileged legal material. The engineers and compliance teams who visit our website and use our application should not have to wonder whether their browsing is being sold or replayed. We therefore set a simple rule: no cookie or similar technology is used on gonaturelle.si or in the application unless it is strictly necessary to provide something you asked for.

This is consistent with our analytics policy, which forbids collecting proprietary prompts, agent parameters, test case content or any PHI or PII in telemetry. Under the EU ePrivacy Directive (Article 5(3)) and the UK Privacy and Electronic Communications Regulations, strictly necessary cookies do not require consent, which is why we do not show a consent banner. We still explain each one here.

Cookies we set

All of the cookies below are first-party (set by gonaturelle.si), marked Secure and, where they are not needed by client-side code, HttpOnly. None of them are used to build a profile of you or shared with third parties.

• ef_session: keeps you signed in to the GONATURELLE application after authentication, including SSO through your identity provider. Expires after 12 hours of inactivity or when you sign out. Strictly necessary.
• ef_csrf: a random token that protects form submissions and API calls from cross-site request forgery. Session lifetime. Strictly necessary.
• ef_sso_state: a short-lived value used during SAML or OIDC sign-in to tie the identity provider's response to your request. Expires after 10 minutes. Strictly necessary.
• ef_region: remembers whether your workspace is in the US or India region so requests reach the right data plane. 30 days. Strictly necessary.
• ef_ui: remembers interface choices you make in the application, such as a collapsed sidebar or table density. 12 months. Functional, set only after you change a setting.

What we do not use

We do not use advertising or retargeting cookies, social media pixels, cross-site tracking, browser fingerprinting, session replay or heatmap tools, or third-party analytics cookies on the website or in the application.

To understand which pages and forms are useful, we count events such as a completed demo request, a copied SDK snippet or a calculator result. These counts are recorded server-side by GONATURELLE without cookies or persistent identifiers, are aggregated, and never include the content of what you typed. IP addresses in web server logs are kept for security purposes for up to 12 months and are not used for analytics.

Third-party requests on our website

Some pages, such as our integrations directory, display company logos fetched from an external logo image service, and our fonts are served from our own domain. When your browser loads a third-party image it necessarily sends your IP address and browser user agent to that service, as with any image on the web. We do not send any identifier, cookie or page content with these requests, and we have chosen services that do not need cookies to deliver images.

If we embed a video or other third-party content in the future, we will load it only after you click to play it, and we will update this policy first.

Managing cookies

You can block or delete cookies through your browser settings. If you block the strictly necessary cookies above, the public website will still work, but you will not be able to sign in to the application or submit some forms.

Browser signals such as Global Privacy Control are honoured automatically: because we do not sell or share personal data for cross-context behavioural advertising, there is nothing further to opt out of, but we record the signal against your account if you are signed in.

Changes and contact

If we ever propose to use a cookie that is not strictly necessary, we will update this policy, show a clear choice before setting it, and default to off. Questions about cookies or tracking can be sent to privacy@gonaturelle.si or to our Grievance Officer at the address in the Privacy Policy.