Cookie Policy
Last updated: 24 August 2026
Quantara uses essential cookies and local browser storage to provide authentication, language, theme, proposal access, OAuth integrity and safe checkout return context.
Google Tag Manager is loaded with analytics and advertising consent denied by default. Analytics may be enabled only after the visitor chooses Allow analytics; advertising storage and personalization remain denied.
Cookies and browser storage in the product
| Name or storage | Purpose | Duration |
|---|---|---|
| quantara_session cookie | Authenticates a signed-in user. HttpOnly, SameSite=Lax and Secure in production. | Up to 30 days; removed on logout or detected expiry. |
| quantara_locale cookie | Remembers English or Arabic and the correct text direction. | One year. |
| google_drive_oauth_state cookie | Protects the integrity of a user-initiated Google Drive connection. | 10 minutes. |
| proposal_access_<proposalId> cookie | Remembers a successful passcode unlock for one proposal. HttpOnly, SameSite=Lax and Secure in production. | 30 minutes. |
| quantara-theme-mode localStorage | Remembers the selected light, dark or system theme on the device. | Until the user changes it or clears site storage. |
| quantara-analytics-consent localStorage | Stores the visitor's analytics choice and applies it to Google Consent Mode. It does not contain an account identifier. | Until the visitor changes the choice or clears browser storage. |
| Pending BOQ unlock sessionStorage | Keeps only a BOQ identifier and relative return path while a checkout return is pending. | Until consumed, cleared or the browser tab session ends. |
Analytics and external infrastructure
Quantara presents an analytics choice before granting analytics storage. Essential only keeps analytics storage denied. Allow analytics grants analytics storage for tags configured through Google Tag Manager. Advertising storage, advertising user data and advertising personalization remain denied in both cases.
Hosting, security and delivery providers may process limited request and security logs as necessary to operate and protect the service. Customer-specific infrastructure and regional commitments are documented in the applicable written agreement where required.
Managing storage
Browser settings can remove cookies and local storage. Clearing quantara-analytics-consent makes the analytics choice appear again. Removing essential authentication or preference storage may sign the user out, reset language or theme, interrupt an OAuth connection or remove temporary proposal access.
Optional providers are engaged only when the relevant user or organization enables their workflow. Necessary cookies are used to perform the action requested by the user.
Contact and privacy requests
Use the verified channels below for privacy rights, security reports, legal questions and support. Do not send passwords, authentication tokens or confidential project documents by email or WhatsApp.
- Email: solution@vistabylara.com
- Telephone: +971 50 799 4292
- WhatsApp: +971 50 799 4292