Cookie Policy
Last updated: 7 October 2026
This Cookie Policy explains which cookies the SP-APPS website (https://sp-apps.com) uses, what data they collect, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR, the EU ePrivacy Directive, the Jordanian Personal Data Protection Law, and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
1. What are cookies?
Cookies are small text files that a website stores in your browser. Some are strictly necessary for the site to work. Others help us understand how visitors use the site. Under Article 5(3) of the EU ePrivacy Directive, we set strictly necessary cookies without asking, because the site cannot work without them. We set every other cookie only as described in section 4.
This Cookie Policy is part of our Privacy Policy, which explains in full how we handle your personal data.
2. Cookies we use
sp_apps_session
- Provider: SP-APPS
- Purpose: Keeps your browsing session and remembers your selected language.
- Category: Strictly necessary
- Duration: 24 hours
XSRF-TOKEN
- Provider: SP-APPS
- Purpose: Protects our forms against cross-site request forgery attacks.
- Category: Strictly necessary
- Duration: 24 hours
laravel_cookie_consent
- Provider: SP-APPS
- Purpose: Remembers whether you accepted or rejected analytics cookies.
- Category: Strictly necessary
- Duration: 365 days
__cf_bm, cf_clearance
- Provider: Cloudflare
- Purpose: Detects bots and protects our contact, quote and job application forms (Cloudflare Turnstile).
- Category: Strictly necessary
- Duration: Up to 30 minutes
_ga, _ga_*
- Provider: Google Analytics
- Purpose: Distinguishes visitors and visits so we can count page views and see which pages are useful.
- Category: Analytics (your choice)
- Duration: Up to 2 years
Cookies set by clutch.co
- Provider: Clutch
- Purpose: Shows verified client reviews from Clutch. Clutch can set its own cookies when its widget loads.
- Category: Third-party content
- Duration: Set by Clutch
3. Data collected through cookies
- The pages you visit, how long you stay, and how you reached our site (the referring page).
- Your device type, browser, operating system, screen size and language.
- Your approximate location (country or city), derived from your IP address. Google Analytics 4 does not log or store IP addresses.
- Your cookie choice and your selected language.
We do not use cookies for advertising. We do not build advertising profiles. We do not sell your personal information.
4. Managing your cookie choices
If you are in the European Economic Area, the United Kingdom, Switzerland or Jordan, analytics cookies stay off until you accept them (opt-in). Everywhere else, analytics cookies are on until you reject them (opt-out).
We use Google Consent Mode v2. While analytics cookies are off, Google Analytics stores no cookies on your device and receives only anonymous, cookieless signals.
You can accept or reject analytics cookies in the banner shown on your first visit. You can change your choice at any time with the "Cookie Settings" link in the footer. When you reject analytics cookies, we delete the Google Analytics cookies already in your browser. We keep your choice for 365 days, then ask again.
You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, parts of the site, such as the forms, can stop working.
5. Your rights under the GDPR (EU, EEA and UK)
The data controller for the personal data collected through cookies is SP-APPS, Al-Dalahma Complex, Khalda-Dabouq, King Abdullah II Street, Amman, Jordan. We process it on these legal bases:
- Consent (Article 6(1)(a) GDPR) for analytics cookies. You can withdraw your consent at any time, as easily as you gave it.
- Legitimate interests (Article 6(1)(f) GDPR) for strictly necessary cookies, site security and bot protection.
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to:
- Access the personal data we hold about you (Article 15).
- Correct personal data that is wrong or incomplete (Article 16).
- Have your personal data erased, the "right to be forgotten" (Article 17).
- Restrict or object to how we process your personal data (Articles 18 and 21).
- Receive your personal data in a portable, machine-readable format (Article 20).
- Withdraw your consent at any time. This does not affect processing done before you withdrew it.
- Lodge a complaint with the data protection supervisory authority in your country.
Some of our providers, such as Google and Cloudflare, can process data outside the EEA. These transfers rely on the EU-U.S. Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.
We reply to GDPR requests within one month. If a request is complex, we can extend this by two more months, and we will tell you why.
6. Your rights under the CCPA / CPRA (California)
If you are a California resident, you have these rights:
- Right to know: in the last 12 months, through the cookies listed above, we collected identifiers (such as cookie IDs and IP addresses), internet or network activity, and approximate geolocation, for the purposes described in this policy.
- Right to delete the personal information we collected from you.
- Right to correct personal information that is wrong.
- Right to opt out of the sale or sharing of your personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
- Right to limit the use of sensitive personal information. We do not collect sensitive personal information through cookies.
- Right to non-discrimination for using any of these rights.
We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a request to opt out and keep analytics cookies off.
We reply to verifiable CCPA requests within 45 days. You can also ask an authorized agent to make a request for you.
7. How to delete your data
To delete the cookies on your device at any time, choose "Reject non-essential" in "Cookie Settings" and clear the cookies for sp-apps.com in your browser settings.
To ask us to delete your personal data, including analytics data linked to your cookies, send an email to info@sp-apps.com with the subject "Data deletion request". Include your full name, the email address or phone number you used when you contacted us, and which data you want us to delete. We can ask for more information to confirm your identity. We delete your data, ask our service providers to delete it too, and confirm by email within one month.
Analytics data is linked to a random cookie ID, not to your name. If you send us the value of your _ga cookie, we can ask Google to delete the data linked to it.
8. Contact us
For any question about this policy or your other rights, email info@sp-apps.com or send us a message through our contact page.