Cyber Ultimax Group · Cookie & Tracking Technology Policy

Cookie & Tracking Policy

Last updated: October 22, 2026 • Effective Date: October 22, 2026 • Corporate Controller: Cyber Ultimax Limited

01

What Are Cookies and Local Storage?

Cookies and HTML5 browser local storage are small text files and key-value records placed on your computing device when accessing websites or web applications. This Cookie Policy explains how Cyber Ultimax Limited ("Cyber Ultimax", "we", "us") uses cookies, browser local storage, and session identifiers on Spike Console and across interconnected services (such as NattyPad), and forms part of our Privacy Policy.

02

Cookies & Local Storage Records We Use

In alignment with the Nigeria Data Protection Act 2023 (NDPA 2023) and the European ePrivacy Directive, we categorize our storage technologies as follows:

A. Strictly Necessary & Security (Always Active)

Required

These tokens are essential to maintain secure authenticated sessions, authenticate multi-tenant workspace credentials, protect against Cross-Site Request Forgery (CSRF) exploits, and ensure safe routing. The console cannot operate securely without them.

  • • spike_auth_token: Secure HTTPS session token authenticating workspace API requests.
  • • XSRF-TOKEN: CSRF token validating that state-changing requests originate from your verified browser.
  • • spike_chunk_reload_ts: Deployment cache-busting safeguard preventing infinite reload loops.

B. Functional & Preference Storage

Preferences

Used to remember your individual visual configuration, such as color scheme preferences, so your workspace remains consistent between visits without transmitting unnecessary payloads to the server.

  • • spike-theme: Remembers light or dark theme selection.
  • • spike_cookie_consent: Stores your cookie preference decision ('all' vs 'essential').

C. Performance & Telemetry (Gated by Consent)

Optional / Consent

Enables de-identified page load timing, aggregate conversion tracking, and user navigation telemetry to help us identify bottlenecks and optimize system speed. These cookies are strictly disabled by default and only execute if you grant permission via our floating consent banner.

03

Cookies We Do Not Use

We strictly DO NOT deploy cross-site tracking cookies, third-party advertising retargeting pixels, or behavioral broker beacons. Your operational activities inside Spike Console workspaces are private to your business and are never commercialized.

04

Managing & Revoking Cookie Preferences

You may modify or revoke your cookie choices at any time directly through the floating preference banner or through your browser settings:

  • Browser Settings: You can configure Chrome, Safari, Firefox, or Edge to block or delete cookies. Note that disabling strictly necessary cookies will render secure authentication and workspace features non-functional.
  • Revoke via Console: Clear your browser's local storage for spikeconsole.com to reset the consent prompt on your next visit.

Questions regarding tracking technologies? Contact our Data Protection Officer at dpo@cyberultimax.com.