This policy describes how Noumena Labs (“we”, “us”) handles personal data collected through www.cogentlm.com (“the Site”). We wrote it in plain language. If anything is unclear, email privacy@noumenalabs.ai.
Who we are (data controller)
Noumena Labs operates this Site. Contact: privacy@noumenalabs.ai. For specifics on cookies and similar storage, see the Cookies section below.
What we collect
- Historical waitlist signups. If you submitted the previous waitlist form, we stored your email address, your self-selected professional role, and (optionally) a name if you chose to provide one. The name field was optional and used only to address you in release-related outreach.
- Consent record. Your cookie preferences are stored locally on your device (and in a first-party cookie) so we can honor them across visits.
- Vercel Web Analytics. If you enable Analytics cookies, Vercel Web Analytics records anonymous, aggregate page-view data such as timestamp, URL path, dynamic route, referrer, approximate geography, device type, operating system, browser version, and analytics script version. We strip query strings and hash fragments before analytics events are sent from this Site.
- Server logs. Like most sites, our hosting provider records basic request metadata (IP address, user agent, timestamp) for security and abuse-prevention. These logs are retained by the hosting provider and are not used for profiling.
Vercel Web Analytics is designed to avoid third-party cookies and personal identifiers that track users across different applications or websites. We do not use advertising cookies or tracking pixels. If that changes, we’ll update this policy (including the Cookies section) and request consent before anything new runs.
Why we collect it (legal basis — GDPR)
- Historical waitlist email, name, and role: processed under your consent (Art. 6(1)(a) GDPR) and to fulfill our release-notification commitment (Art. 6(1)(b)). The role helps us understand our audience demographics and package adoption fit. Name, when provided, is used only to address you in any outreach.
- Necessary cookies: processed under our legitimate interest (Art. 6(1)(f)) in running a secure site that remembers your preferences.
- Vercel Web Analytics: processed only with your prior, explicit consent (Art. 6(1)(a)).
- Any future marketing cookies: will be processed only with your prior, explicit consent (Art. 6(1)(a)).
- Server logs: processed under legitimate interest in site security.
- Profile generation: We generate a deterministic visual “sigil” based on your email. This feature is exclusively visual and does not constitute automated decision-making or profiling with any legal effects.
Who we share it with
- Our hosting provider (Vercel Inc., USA), which processes request traffic and, if you opt into Analytics, Vercel Web Analytics measurements on our behalf.
- We do not sell or rent personal data, and we do not share it with advertisers. This satisfies the requirement that we do not “sell” or “share” personal information as defined by California (CCPA) and other US state privacy laws.
If your data is transferred outside your home jurisdiction (for example, EU → US via Vercel), we rely on the applicable safeguards such as Standard Contractual Clauses and, where available, the EU–US Data Privacy Framework.
How long we keep it
- Historical waitlist email: until you ask us to delete it, or until we finish retiring the beta-signup records.
- Consent record: roughly one year, after which we’ll ask again.
- Vercel Web Analytics: Vercel discards the session hash after 24 hours; aggregate reports are retained according to our Vercel account settings and Vercel’s service terms.
- Server logs: per our hosting provider’s retention policy (typically a few weeks).
Your rights
Under GDPR (and comparable laws in other regions) you have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of that data.
- Object to, or restrict, our processing of it.
- Receive a copy of your data in a portable format.
- Withdraw any consent you have given, at any time.
- Lodge a complaint with your supervisory authority (e.g. the ICO in the UK, your national DPA in the EU).
To exercise any of these, email privacy@noumenalabs.ai. We’ll respond within the timelines required by law (typically one month under GDPR).
Children
The Site is not directed at children under 16, and we do not knowingly collect their personal data.
Cookies
Cookies are small text files your browser stores on your device; similar technologies (localStorage, sessionStorage) work the same way from a privacy standpoint and are covered here. We group them into the categories below, and nothing beyond “Necessary” is stored, loaded, or sent until you opt in.
- Necessary (required) — Required for the site to function: session handling, security, and remembering your consent choice. These cannot be turned off.
- Analytics — Vercel Web Analytics page views and aggregate usage metrics: referrer, device/browser, approximate geography, and site performance signals. No advertising use.
- Marketing — Cookies set by marketing or advertising partners to build a profile of your interests. Currently unused; reserved for future campaigns.
The table below lists every cookie this site currently sets. If we add anything new, it will appear here and the CONSENT_POLICY_VERSIONin our code will be bumped so you’re asked to renew consent.
| Name | Category | Purpose | Duration | Party |
|---|---|---|---|---|
c15t-consent (and related keys) | Necessary | Remembers your cookie preferences so we don’t have to ask again every visit. | ~1 year | First-party |
a11y-theme | Necessary | Remembers your theme choice (dark/light) so the right colors render on first paint. | ~1 year | First-party |
| Vercel Web Analytics requests; no third-party cookie | Analytics | Records anonymous aggregate page views and basic referrer, route, device/browser, approximate geography, and script-version data after Analytics consent. | Session hash discarded after 24 hours; aggregate reports per Vercel account retention. | Vercel, acting as processor |
We do not load marketing or advertising cookies. Analytics remains off unless you enable the Analytics category.
Managing your choices
You can change or withdraw your consent at any time using the button below:
You can also clear cookies directly from your browser settings. Note that clearing the c15t-consent cookie will cause the banner to appear again on your next visit.
Changes
If we change this policy in any material way, we’ll update the “last updated” date above and, where appropriate, prompt you again for consent.