Legal
Cookie policy
Cookie Policy
Informasjonskapsler / Informasjonskapselpolicy
Edgeon AS | edgeon.no | Ledgeron | Thermon
Version 1.0 | March 2026
This Cookie Policy explains what cookies are, which ones we use on edgeon.no and our platform products (Ledgeron and Thermon), why we use them, and how you can control them.
This policy is published in accordance with the EU ePrivacy Directive and the General Data Protection Regulation (GDPR). It should be read alongside our Privacy Policy.
Last updated: March 2026. We review this policy annually or when our cookie usage changes.
1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, or phone) when you visit a website or use a web application. They allow the site to remember your actions and preferences over a period of time, so you do not have to re-enter them each time you visit.
Cookies are not programs and cannot carry viruses or malware. They cannot access other information on your device.
Similar technologies include local storage, session storage, and pixel tags. Where relevant, this policy covers these too.
2. Types of Cookies We Use
We divide cookies into three categories based on their purpose and whether consent is required:
✅ Category A: Strictly Necessary No consent required. Always active. |
⚠️ Category B: Analytics Opt-in consent required before loading. |
🚫 Category C: Marketing Opt-in consent required. Currently not used. |
✅ Category A – Strictly Necessary Cookies These cookies are essential for the website and platform to function. Without them, you cannot log in, use secure areas, or maintain a session. They do not track you or collect identifiable information beyond what is needed for the service. No consent is required, but we disclose them here for full transparency. |
| Cookie Name | Provider | Purpose | Duration | Consent? |
| edgeon_session | Edgeon AS | Maintains your authenticated login session | Session | Not required |
| csrf_token | Edgeon AS | Prevents cross-site request forgery attacks | Session | Not required |
| cookie_consent | Edgeon AS | Stores your cookie consent preferences and version | 13 months | Not required |
| auth0.* | Auth0 / Azure AD B2C | Authentication state and SSO token management | Session / 7 days | Not required |
| __stripe_sid | Stripe | Required for secure payment processing sessions | Session | Not required |
| __stripe_mid | Stripe | Stripe fraud detection (necessary for payment) | 1 year | Not required |
⚠️ Category B – Analytics Cookies These cookies help us understand how visitors use our website so we can improve it. They collect anonymised or pseudonymised data only. Analytics cookies are NOT loaded until you have given explicit opt-in consent via our cookie banner. |
| Cookie Name | Provider | Purpose | Duration | Consent? |
| _ga | [Analytics tool TBD] | Distinguishes unique users (anonymised) | 2 years | Required |
| _ga_* | [Analytics tool TBD] | Session state for analytics | 2 years | Required |
| _gid | [Analytics tool TBD] | Distinguishes users for 24h sessions | 24 hours | Required |
| posthog_* | PostHog (if used) | Product analytics, event tracking (self-hosted EU) | 1 year | Required |
🚫 Category C – Marketing & Tracking Cookies We currently do NOT use any marketing, advertising, retargeting, or third-party tracking cookies. If this changes in the future, we will update this policy and request explicit consent before deploying any such cookies. |
| Cookie Name | Provider | Purpose | Duration | Consent? |
| (none) | – | No marketing cookies are currently used | – | – |
3. First-Party vs. Third-Party Cookies
| Type | Set By | Examples Used | Data Leaves Our Servers? |
| First-party | Edgeon AS (edgeon.no) | Session cookie, CSRF token, consent record | No – stays on our infrastructure |
| Third-party | External providers | Auth0, Stripe, analytics tool | Yes – governed by provider’s own policies |
For third-party cookies where data is transferred outside the EEA, we have Standard Contractual Clauses (SCCs) in place with the relevant providers. See our Privacy Policy for full details.
4. How We Obtain Consent
When you first visit edgeon.no, a cookie consent banner is displayed before any non-essential cookies are loaded. The banner:
Clearly describes each category of cookie
Requires a positive opt-in action for non-essential cookies (no pre-ticked boxes)
Makes it equally easy to decline as to accept (both options are prominently displayed)
Does NOT set any analytics or marketing cookies until explicit consent is given
Records your consent with a timestamp and the version of this policy
What We Record When You Consent
| Data Point | Value Stored | Purpose |
| Consent given | true / false per category | Record your choice |
| Timestamp | ISO 8601 datetime (e.g. 2026-03-17T10:00:00Z) | Audit trail |
| Policy version | e.g. “v1.0-2026-03” | Ensure consent is re-requested if policy changes |
| Session ID | Anonymous identifier | Link consent to this browser session |
We do not link consent records to your personal identity unless you are also logged in to the platform, in which case consent is associated with your account.
5. How to Manage Your Cookie Preferences
You have full control over cookie preferences at any time through the following methods:
| Method | How |
| Cookie banner | Click "Manage preferences" or "Cookie settings" on the banner that appears on your first visit. You can also reopen it via the link in our website footer. |
| Account settings | If you are logged in to the Ledgeron or Thermon platform, you can manage preferences under Settings → Privacy → Cookie Preferences. |
| Email request | Email privacy@edgeon.no to request withdrawal of consent or deletion of consent records. |
| Browser settings | You can block or delete all cookies via your browser settings. Note: blocking strictly necessary cookies will prevent login and core features from working. |
Browser-specific Cookie Controls
Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Cookies and site permissions → Manage and delete cookies
For more information about cookies and how to manage them, visit www.allaboutcookies.org.
6. Cookie Retention Periods
Cookie retention periods vary by type. Session cookies are deleted automatically when you close your browser. Persistent cookies expire after the period shown in Section 2. We do not keep cookies longer than necessary.
When you withdraw consent for analytics cookies, those cookies are deleted within 30 seconds of you changing your preference. Strictly necessary cookies remain active until your session ends or the cookie naturally expires.
7. Recommended Consent Management Platform (CMP)
For implementation of the consent banner, we recommend one of the following Consent Management Platforms, all of which are GDPR and ePrivacy compliant and suitable for Norway / EEA:
| Tool | Pricing | Highlights | Recommended For |
| Cookiebot (Usercentrics) | Free tier (up to 500 pages); paid from €9/month | Fully automated cookie scanning, IAB TCF certified, widely trusted by regulators | Most recommended – easiest compliance |
| CookieYes | Free tier available; paid from €10/month | Easy setup, good analytics integration, GDPR + UK compliant | Good for Next.js / React sites |
| Axeptio | From €14/month | Friendly UI design, strong French/EU focus, GDPR-first | If brand experience is priority |
| Klaro (open source) | Free (self-hosted) | Full control, no third-party dependency, developer-friendly | If you prefer to self-host |
Note: Whichever tool you choose, ensure it is configured to block all non-essential cookies BEFORE they are loaded – not just after. Many tools have a “blocking mode” that must be explicitly enabled.
8. Changes to This Policy
We may update this Cookie Policy when we change the cookies we use, when new legal guidance is issued, or when we add new features or integrations. The version number and date at the top of this document will always reflect the latest version.
If we add a new category of cookie that requires consent, we will re-display the consent banner to all users. We will not retroactively use cookies for purposes not disclosed at the time of consent.
9. Contact & Complaints
If you have questions about our use of cookies, please contact:
Edgeon AS – Privacy Contact | privacy@edgeon.no
If you are not satisfied with our response, you can lodge a complaint with:
Datatilsynet – The Norwegian Data Protection Authority
Website: www.datatilsynet.no | Phone: +47 74 07 70 00
Document Information
Version 1.0 | March 2026 | Edgeon AS | ePrivacy Directive + GDPR Compliant
Review annually or on material change to cookie usage. [TODO: Confirm analytics tool choice and update cookie names in Section 2 before publishing]