Cookies Policy

Onyx Arena Cookies Policy


Data controller: The website onyxarena.com is operated by MDLBEAST, doing business as "Onyx Arena" (hereinafter "Onyx Arena", "we", "our", or "us"). MDLBEAST is the controller of personal data processed through cookies on this website. Contact details for the controller are provided in our Privacy Policy mentioned in section 10 below. 

This Cookie Policy explains how Onyx Arena uses cookies and similar technologies on onyxarena.com. 

It describes what these technologies are, why we use them, the legal basis for our use of them, how long related data is retained, and the choices currently available to you.


1. What are cookies? 

Cookies are small text files placed on your device when you visit a website. They help website’s function, remember your settings, improve performance, and provide information about how visitors use the site. 

We may also use similar technologies such as local storage, pixels, tags, and other identifiers for similar purposes. In this policy, we refer to all these technologies as "cookies" unless otherwise stated. 


2. How we use cookies 

We use cookies for the following purposes: 

  • to operate and secure our website 

  • to remember language and other preferences 

  • to support our contact form and related interactions 

  • to understand how visitors use our website 

  • to improve site performance and user experience 

  • to detect and diagnose technical errors 

Some cookies are strictly necessary for the site to function. Other cookies, including analytics cookies, help us understand how visitors use our website and improve performance and user experience. 


Legal basis for processing 

We process personal data collected through cookies on the following legal bases, as recognized under the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and comparable data protection laws that may apply to visitors from other jurisdictions: 

  • Legitimate interests for cookies are necessary to operate, secure, and improve our website, to detect and diagnose errors, and to understand how visitors use our site. These legitimate interests include maintaining website functionality, ensuring the security and integrity of our services, measuring and improving performance, and improving the overall user experience. In each case, we balance our interests against your rights and reasonable expectations. 

  • Performance of a contract or pre-contractual steps for cookies that are necessary to provide a service you have requested, such as enabling our contact form when you choose to use it. 

  • Consents were required by applicable law, for cookies that are not strictly necessary, including marketing cookies. 

Where applicable law requires your consent for the placement of non-essential cookies, we will rely on consent. In other cases, we rely on legitimate interests on a legal basis, as described above. In jurisdictions where required, marketing cookies will only be used based on your consent. 

At the time of this policy, Onyx Arena does not provide an on-site cookie consent banner or cookie preference management tool, and non-essential cookies (including analytics and marketing cookies) may currently be placed automatically when you visit our website. Until such a consent mechanism is in place, we rely on legitimate interests for non-essential cookies (other than marketing cookies in jurisdictions where consent is required), and you can manage cookies through your browser settings, including blocking or deleting cookies see section 8. 



3. Cookies used on onyxarena.com 

The cookies below are associated with your visit to Onyxarena.com Additional cookies that may be set by service providers supporting our contact form are listed separately in section 4. 


Necessary 

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data. 

Statistics 

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously 

Unknown subdomains  

The following subdomains were discovered but not scanned. Subdomains may also be setting cookies or using similar tracking technologies. Please consider if these subdomains needs to be scanned as well.  

Marketing Cookies 

Marketing cookies are used to track user behavior across visits and platforms in order to measure marketing performance, analyze conversion funnels, and improve marketing effectiveness. 

Other Cookies 

Cookies used for platform stability, testing, queue management, load balancing, or backend configuration. These cookies do not directly track users for marketing purposes but may store technical or configuration information and support analytics delivery.


Preference Cookies 

Cookie

Provider / Domain

Duration

Purpose

NEXT_LOCALE

Onyx Arena / onyxarena.com

~7 days

Stores your selected language / locale


Analytics Cookies 

Cookie

Provider / Domain

Duration

Purpose

_ga

Google Analytics / .onyxarena.com

Up to 2 years

Distinguishes users and measures site usage

ga

Google Analytics / .onyxarena.com

Up to 2 years

Maintains session and engagement data

AMP_

Amplitude / .onyxarena.com

Up to 1 year

Supports product and behavioral analytics

AMP_MKTG_

Amplitude / .onyxarena.com

Up to 1 year

Supports marketing-related analytics

AMP_TEST

Amplitude / .onyxarena.com

Session

Technical Amplitude cookie used during domain checks

AMP_TLDTEST

Amplitude / .onyxarena.com

Session

Technical Amplitude cookie used during domain checks

Analytics technologies on onyxarena.com are deployed through a tag management system, which allows analytics tools such as Google Analytics and Amplitude to be activated and managed centrally. The tools activated through this system may be updated from time to time.


Functional Storage 

Functional cookies help a website remember preferences and manage features (such as language, region, login state, or form progress) to improve usability, without tracking users for marketing or analytics purposes. 

Item

Provider / Domain

Duration

Purpose

onyx-cache-queries

Onyx Arena / onyxarena.com

Up to ~12 hours

Stores cached responses from services used by the site to improve performance, including a non-precise (country-level) geolocation lookup used for analytics



4. Cookies that may be set when using our contact form 

Our contact form is provided by Airtable, a third-party service provider. When you view or interact with our contact form, Airtable and the additional service providers it relies on (including Stripe, X, and Cloudflare) may place cookies in your browser. These cookies are not set by Onyx Arena directly and appear only on pages where the contact form is used. 

Although some of the cookies in this section are associated with Stripe, Onyx Arena does not process payments directly on its website. These cookies reflect technical dependencies of the service providers we rely on for our contact form, not direct commercial processing by Onyx Arena. 


Strictly Necessary Cookies 

Cookie

Provider / Domain

Duration

Purpose

__Host-airtable-session

Airtable / airtable.com

Up to 1 year

Maintains the contact form session

__Host-airtable-session.sig

Airtable / airtable.com

Up to 1 year

Signature paired with the session cookie

AWSALBTG

Airtable / airtable.com

~7 days

Supports load balancing

AWSALBTGCORS

Airtable / airtable.com

~7 days

Supports load balancing

brw

Airtable / airtable.com

Up to 1 year

Browser identifier used for error logging

brwConsent

Airtable / airtable.com

~1 day

Airtable internal configuration cookie

login-status-p

Airtable / airtable.com

Session

Tracks session state for the contact form

__Host-airtable-target-cell

Airtable / airtable.com

Session

Stores form state and routing information

__Host-airtable-target-cell.sig

Airtable / airtable.com

Session

Signature paired with the target-cell cookie

acq

Airtable / airtable.com

Session

Airtable acquisition metadata

acq.sig

Airtable / airtable.com

Session

Signature paired with the acquisition cookie

mbpg

Airtable / airtable.com

Up to 1 year

Airtable internal cookie

mbpg.sig

Airtable / airtable.com

Up to 1 year

Signature paired with mbpg

__cf_bm

Cloudflare / twitter.com

~1 day

Bot protection

__stripe_mid

Stripe / airtable.com

Up to 1 year

Stripe device identifier used for fraud prevention

__stripe_sid

Stripe / airtable.com

~1 day

Stripe session cookie

m

Stripe / m.stripe.com

Up to ~400 days

Stripe device detection

_ab

Stripe / m.stripe.network

Session

Stripe technical cookie

_mf

Stripe / m.stripe.network

Session

Stripe technical cookie

id

Stripe / m.stripe.network

Session

Stripe technical cookie


Functional Cookies 

Cookie

Provider / Domain

Duration

Purpose

internal/page_view

Airtable / airtable.com

Session

Tracks form / page-view state

1

Stripe / m.stripe.network

Session

Supports secure payment-related components

recent-views

Stripe / stripe.com

~1 month

Stripe interface state

AirtableLocalPersister.leftNavigationWidthByAppId...

Airtable / static.airtable.com

Persistent (local storage)

Remembers interface sidebar width

AirtableLocalPersister.sectionCollapsedStateByPageAndElement...

Airtable / static.airtable.com

Persistent (local storage)

Remembers which interface sections are collapsed

AirtableLocalPersister.sectionCollapsedStateByPageAndElement... (additional variants)

Airtable / static.airtable.com

Persistent (local storage)

Additional interface state


Analytics Cookies 

Cookie

Provider / Domain

Duration

Purpose

AMP_unsent_

Amplitude / cdn.amplitude.com

Persistent until sent or cleared

Stores unsent analytics events locally before transmission

In addition, the analytics cookies listed in section 3 may also be accessible on the contact page, since they are scoped to.onyxarena.com and can be read across pages of the site. 


Marketing Cookies 

Cookie

Provider / Domain

Duration

Purpose

personalization_id

X / twitter.com

Up to ~400 days

Identifier used by X to personalize advertising, measure ad effectiveness, and build advertising profiles

i/adsct

X / twitter.com

Session

Advertising pixel used by X to measure visits arriving from X advertising content and to support ad-conversion reporting

Marketing cookies may be used by the providers listed above to measure the effectiveness of advertising campaigns, attribute website visits to specific ads, and, depending on the provider's own configuration and your settings with that provider, build an advertising profile of your interests across different websites. The information collected may be combined with other data the provider holds about you. 



5. Third parties that may receive data through cookies 

Depending on the page you visit, cookie-related data and related technical information may be processed by: 

  • Google for tag management and analytics (Google Analytics) 

  • Amplitude for product and behavioral analytics 

  • Airtable for our contact form and related session state 

  • Stripe in connection with components used by our contact form; Onyx Arena does not process payments directly on its website 

  • X (formerly Twitter) for bot protection, personalization, and advertising measurement features used in connection with our contact form 

  • Cloudflare for bot protection on parts of the site provided by our service providers 

  • ipdata.co for IP-based, non-precise (country-level) geolocation used for analytics; this provider may receive your IP address when the lookup is performed 

  • Sentry for error monitoring (diagnostic data only; see below) 

  • DatoCMS (including its asset network), Mux (for video delivery), and Google (via gstatic.com, for 3D asset support) these services deliver content and media to your browser and are not used to set cookies on our site at the time of this policy 


Error monitoring (Sentry): When an error occurs while you use our website, a small amount of technical diagnostic data such as the error details and basic browser and device information may be sent to Sentry to help us detect and fix problems. Session replay (screen recording) and performance tracing features are not enabled. 

These providers may process technical information such as IP addresses, cookie identifiers, browser or device information, and website usage data, depending on the service and the page you visit.



6. International data transfers 

Some of the providers we use may process data in countries outside your country of residence, including the United States and the United Kingdom. Where such a transfer takes place, we rely on one or more of the following safeguards, in line with the requirements of the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and other applicable laws: 

  • transfers to jurisdictions that have been recognized as providing an adequate level of data protection by the competent authority; 

  • contractual safeguards entered into with the receiving provider, such as data processing agreements or equivalent contractual clauses that impose appropriate protection on the personal data transferred; and 

  • other safeguards or derogations permitted under applicable law, where relevant. 



7. How long do we keep data collected through cookies 

The cookie durations shown in the tables above describe how long individual cookies remain on your device. Separately, data that we or our service providers derive from those cookies (such as aggregated analytics reports, error logs, and advertising measurement data) is retained only for as long as is necessary for the purposes described in this policy, after which it is deleted, anonymized, or aggregated. 

Indicative retention periods for the main categories of data are: 

  • Analytics data (e.g. Google Analytics, Amplitude) retained by the provider in accordance with their default or configured retention settings, typically between 14 months and 26 months for user-level data, after which it is aggregated or deleted. Aggregated reports may be kept for longer to support long-term trend analysis. 

  • Error-monitoring data (e.g. Sentry) retained for a limited period necessary to investigate and resolve issues, typically between 30 and 90 days, in accordance with our provider's standard settings. 

  • Contact form session data (e.g. Airtable session cookies and related data) retained only for the duration of the session or for the period necessary to support the form and any follow-up communication. 

  • Advertising measurement data (e.g. X) retained by the advertising provider in accordance with their own retention policies. 

We review retention periods periodically and may update them to reflect operational needs, provider defaults, and legal requirements. Shorter or longer retention periods may apply in individual cases where required by law or to establish, exercise or defend legal claims. 



8. Your choices 

At the time of this policy, Onyx Arena did not provide an on-site cookie consent banner or cookie preference management tool. Cookies can currently be managed through your browser settings, including by blocking or deleting cookies and setting site-specific cookie permissions. 

Most browsers allow you to block or delete cookies, and to control site-specific cookie permissions. Please note that disabling cookies may affect the functionality of parts of onyxarena.com, including the contact form experience. 

Browser support pages: 

If Onyx Arena later introduces a cookie consent banner or cookie preference tool, this Cookie Policy will be updated to explain the choices available through that tool. 



9. Changes to this Cookie Policy 

We may update this Cookie Policy from time to time to reflect changes in our services, vendors, technologies, and legal requirements. When we do, we will update the "Last Updated" date above. 



10. Contact us 

If you have questions about our use of cookies, please contact Onyx Arena using the contact details provided in our Privacy Policy on our website.