Cookie Policy
Last updated: August 13, 2024

This Cookie Policy is issued by Taiwan Semiconductor Manufacturing Company, Ltd. (“ TSMC ”, “ we ”, “ us ” and “ our ”). This Cookie Policy applies to websites that are operated or controlled by TSMC.

What are cookies?

Cookies are small text files that may be stored on your computer or other device when you visit a website. They are generally used to make websites work, to keep track of your movements within the website, to remember your login details, and so on.

Categories of cookies

There are different types of cookies, and they can be distinguished on the basis of their origin, function and lifespan. We use the following types of cookies:

Origin:

  • First party cookies  are cookies that are placed by the website you are visiting, while third party cookies  are placed by a website other than the one you are visiting. Please note that we do not control the collection or further use of data by third parties.

Function:

  • Strictly necessary cookies are necessary to allow the technical operation of a website (e.g., they enable you to move around on a website and to use its features).
  • Performance cookies collect data on the performance of a website such as the number of visitors, the time spent on the website and error messages.

Lifespan:

  • Session cookies are temporary cookies that are erased once you close your browser while persistent or permanent cookies stay on your device until you manually delete them or until your browser deletes them based on the duration period specified in the persistent cookie file.

More information on all aspects of cookies can be found on www.allaboutcookies.org. Please note that TSMC has no affiliation with, and is not responsible for, this third party website.

Why do we use cookies?

We may use cookies to:

  • distinguish between visitors;
  • improve the use and the functionality of our websites;
  • tailor our websites to your needs and preferences;
  • analyze how our websites are used and compile anonymous and aggregate reports.

We do not use the collected information to create visitor profiles.

What types of cookies do we use?

An overview of the cookies used on our websites is set out in the following table.

Name First Party or Third Party? Duration Function Description
_ga Third party (Google Analytics) 2 years Performance (site analytics) Used to keep user ID to distinguish visitors.
_gid Third party (Google Analytics) 24 hours Performance (site analytics) Used to keep user ID to distinguish visitors.
>__utma ~ __utmz Third party (Google Analytics)  24 hrs ~ 2 years Performance (site analytics) Used to identify usage in the website.
__cflb First Party From several seconds up to 24 hours. Session Cookie

The CDN relies on the load balancing cookie:

1) When enabling session affinity with Cloudflare Load Balancer, Cloudflare sets a __cflb cookie with a unique value on the first response to the requesting client. Cloudflare routes future requests to the same origin, optimizing network resource usage. In the event of a failover, Cloudflare sets a new __cflb cookie to direct future requests to the failover pool. The __cflb cookie allows Cloudflare to return an end user to the same customer origin for a specific period of time configured by the customer. This allows the end user to have a seamless experience (for example, this cookie is used for keeping an end user’s items in a shopping cart while they continue to navigate around the website).

2) If you enable either of the following functions: Cloudflare Always Online or Cloudflare Waiting Room, then there are cookies associated with those functions as further described here: https://developers.cloudflare.com/fundamentals/reference/policies-compliances/cloudflare-cookies/

_cfuvid First Party Expires after session Session To allow the Cloudflare WAF to distinguish individual users who share the same IP address.
cf_clearance First Party Default 30 minutes, but customer defined Performance cookies Cookies used by the Challenge Platform to issue a challenge and reach an origin server.
cf_chl_rc_i; cf_chl_rc_ni; cf_chl_rc_m First Party After the challenge has been successfully completed Performance cookies To identify production issues on clients.
cookiePref First Party 1 year Strictly Necessary Your cookie preferences.

Google Analytics

Subject to your consent, our websites use Google Analytics to allow us to analyze and regularly improve the use of our websites. Google Analytics is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For analyzing the use of our websites with Google Analytics, cookies are stored on your device.

When using our websites, the following personal data will be collected:

  • the pages you call up, your “click behavior”;
  • first-time use of our websites;
  • your user behavior (e.g., clicks, scrolls, time spent, bounce rates, links used; interaction with videos; search requests, downloads, language settings);
  • your approximate location (region);
  • your IP address (in abbreviated form);
  • technical information about your browser and the end devices you use (e.g., language settings, screen resolution, user-agent, TLS handshake fingerprint);
  • your internet provider;
  • the referrer URL (via which website/advertising medium you came to our website).

IP address anonymization is enabled by default when using Google Analytics on our website. This means your IP address will be shortened by Google within member states of the European Economic Area (“EEA”) before any storage or processing takes place. Only in exceptional cases the whole IP address will first be transferred to a server in the USA and truncated there.

Google will use this information on our behalf to evaluate your pseudonymous use of our website and to compile reports on the activities. The reports provided by Google Analytics are used to analyze the performance of our websites.

Access by Google LLC, Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and/or US authorities to the data stored by Google cannot be ruled out. To the extent personal data is processed in a country outside the EEA that does not offer a level of data protection comparable to the EEA (as applicable), such as for example currently the USA, we enter into contractual safeguards based on EU Standard Contractual Clauses with Google. Google LLC has also certified itself under the EU-US Data Privacy Framework and its UK Extension.

More information about the contractual arrangements for the processing of personal data with Google and the safeguards can be found at: https://privacy.google.com/businesses/processorterms/ and https://privacy.google.com/businesses/controllerterms/.

We also take the following measures to protect, to the extent possible, the data collected through Google Analytics:

  • We conclude a data processing agreement with Google about how Google may process the data collected through Google Analytics, including safeguards for international data transfers.
  • We configure Google Analytics to not share data with third parties.
  • We do not use the function User-ID.
  • We do not use other Google services in conjunction with Google Analytics.
  • We do not activate the signals option.

The personal data sent by us to Google and associated with these cookies is deleted after 2 months.

The legal basis for such processing is your consent pursuant to Art. 6 (1) lit. a of the EU General Data Protection Regulation (“GDPR”), which you can withdraw at any time in the manner specified below. Your consent is voluntary and will not affect the functionality of your use of our websites.

You can prevent the collection of data related to your use of our websites (including your IP address) to Google and the processing of this data by Google:

  • by rejecting the Google Analytics cookies or all cookies at our cookie consent management platform (“CPM”) and our cookie consent banner (also referred to as “Privacy Preference Center”).
  • for website-based use, downloading and installing the browser add-on to disable Google Analytics HERE; or
  • by configuring your browser software accordingly to reject (all) cookies. However, if you configure your browser to reject all cookies, this may limit functionality on this and other websites.

For more information about Google Analytics terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/gb/ and https://policies.google.com/?hl=en.

Google Consent Mode

We use the so-called Google Consent Mode when using Google services such as Google Analytics. Google Consent Mode works together with our “Privacy Preference Center”. Google Consent Mode takes the user’s consent options from our cookie banner and transfers them to Google. If you give your consent for Google Analytics, for example, this decision will also be transmitted to Google. As a so-called “Gatekeeper” pursuant to the EU Digital Markets Act (“DMA”) Google must ensure that users have consented to the processing of their personal data by Google before personal data of users is processed for personalized advertising. We currently use the basic consent mode of Google Analytics. You can find more information about Google Consent Mode and how Google uses your data here: https://support.google.com/google-ads/answer/10000067?hl=en.

How to manage and disable cookies?

You can choose to accept or reject (except for strictly necessary cookies) all cookies, set preferences for certain websites, or delete/withdraw existing cookies at any time in our “Privacy Preference Center”, which is shown upon opening our websites for the first time and can always be reopened by clicking on the “Privacy Preference Center” hyperlink at the footer of this website and adjusting your settings. If you use different devices to access our websites, it is important to ensure that cookie preferences are set for each browser on every device. Any decision made about cookies on one website does not automatically apply to other websites. You should adjust your cookie consent separately for each website.

If you choose to withdraw your consent, the cookies stored on your browser will be disabled and will no longer collect your personal data. However, they will not be automatically removed from your browser. You will need to do this manually. The processing of your data with a consent prior to the change of cookies will remain unaffected. Please note that disabling cookies may impact your experience on our websites.

More information on how to manage cookies is available at http://www.allaboutcookies.org/manage-cookies/. Please note that TSMC has no affiliation with, and is not responsible for, this third party website.

In addition, you may opt-out of certain cookies by visiting the following third party websites and selecting which company cookies you would like to opt-out of: http://www.aboutads.info/choices/#completed and http://www.youronlinechoices.com/. Please note that TSMC has no affiliation with, and is not responsible for, these third party websites.

Legal basis for the use of cookies

If you are visiting our websites from Europe and the placement of cookies involves the processing of personal data, the legal basis for our processing is our legitimate interest (Art. 6 (1) lit. f GDPR) in the functioning of our websites in connection with strictly necessary cookies and your consent (Art. 6 (1) lit. a GDPR) in connection with functional, performance and targeting/advertising cookies. You can revoke your consent at any time with effect for the future by accessing our “Privacy Preference Center” and changing your preferences.

How to contact us

If you have questions or concerns about the use of cookies on our websites, please contact us at [email protected].