# Entgra IoT Server

## Entgra IoT Server - Cookie Policy

#### About Entgra IoT Server

Entgra IoT Server is a complete solution that enables device manufacturers and enterprises to connect and manage their devices, build apps, manage events, secure devices and data, and visualize sensor data in a scalable manner.

It also offers a complete and secure enterprise mobility management (EMM/MDM) solution that aims to address mobile computing challenges faced by enterprises today. Supporting iOS, Android, and Windows devices, it helps organizations deal with both corporate owned, personally enabled (COPE) and employee-owned devices with the bring your own device (BYOD) concept.

Entgra IoT Server comes with advanced analytics, enabling users to analyze speed, proximity, and geo-fencing information of devices including details of those in motion and stationary state.

## Cookie Policy

IoT Server uses cookies to provide you with the best user experience, and to securely identify you. You might not be able to access some of the services if you disable cookies.

## What is a cookie ?

A browser cookie is a small piece of data that is stored on your device to help websites and mobile apps remember things about you. Other technologies, including Web storage and identifiers associated with your device, may be used for similar purposes. In this policy, we use the term “cookies” to discuss all of these technologies.

## How does IoT Sever process cookies ?

IoT Server uses cookies to store and retrieve information on your browser. This information is used to provide a better user experience. Some cookies have the primary purpose of allowing logging in to the system, maintaining sessions, and keeping track of activities you do within the login session.

Some cookies used in IoT Server are used to identify you personally. However, the cookie lifetime will end when you log-out ending your session or when your session expires.

Some cookies are simply used to give you a more personalised web experience, and these cannot be used to identify you or your activities personally.

This Cookie Policy is part of the IoT Server Privacy Policy.

## What does IoT use cookies for ?

Cookies are used for two purposes in IoT server

1. Security.
2. Providing a better user experience.

### IoT Server uses cookies for the following purposes

#### Preferences

IoT Server uses cookies to remember your settings and preferences and to auto-fill the fields to make your interactions with the site easier.

- These cannot be used to identify you personally.

#### Security

IoT Server uses selected cookies to identify and prevent security risks.

For example, IoT Server may use cookies to store your session information to prevent others from changing your password without your username and password.

IoT Server uses session cookie to maintain your active session.

IoT Server may use a temporary cookie when performing multi-factor authentication and federated authentication.

IoT Server may use permanent cookies to detect the devices you have logged in previously. This is to to calculate the risk level associated with your current login attempt. Using these cookies protects you and your account from possible attacks.

#### Performance

IoT Server may use cookies to allow “Remember Me” functionalities.

### Analytics

IoT Server as a product does not use cookies for analytical purposes.

### Third party cookies

Using IoT Server may cause some third-party cookie being set to your browser. IoT Server has no control over the operation of these cookies. The third-party cookies which maybe set include,

- Any of the social login sites, when IoT Server is configured to use “Social” or “Federated” login, and you opt to do login with your “Social Account”
- Any third party federated login

We strongly advise you to refer the respective cookie policies of such sites carefully as IoT Server has no knowledge or use on these cookies.

## What type of cookies does IoT Server use ?

IoT Server uses persistent cookies and session cookies. A persistent cookie helps IoT Server to recognize you as an existing user, so you can easily return to WSO2 or interact with IoT Server without signing in again. After you sign in, a persistent cookie stays in your browser and will be read by IoT Server when you return.

A session cookie is erased when the user closes the Web browser. It is stored in temporarily and is not retained after the browser is closed. Session cookies do not collect information from the user’s computer.

## How do I control my cookies ?

Most browsers allow you to control cookies through settings. However, if you limit the ability of websites to set cookies, you may worsen your overall user experience, since it will no longer be personalized to you. It may also stop you from saving customized settings like login information. Disabling cookies might make you unable to use Authentication and Authorization functionalities offered by IoT Server.

If you have any questions or concerns regarding the use of cookies, please contact the Data Protection Officer of the organization running this IoT Server instance.

## What are the cookies used ?

Cookie Name | Purpose | Retention
JSESSIONID | Keeps track of the user session data when you are logged in for providing a better user experience. | Session
commonAuthId | Used for authentication the logged in session. | Session
samlssoTokenId | Used for mapping the logged in users with the SAML token. | Request

## Disclaimer

This cookie policy is only for illustrative purposes of the IoT Server product. The content in this policy is technically correct at the time of product shipment. The organization which runs this IoT Server instance has the full authority and responsibility of the effective Cookie Policy.