Legal Information
Cookie Policy
Effective date: 8 March 2026
1. What this policy covers
Cookies are small text files and similar technologies used to recognize a browser or device, maintain sessions, remember preferences, improve security, and understand how websites work.
This policy should be read alongside our Privacy Policy.
2. Categories of cookies and similar technologies we use
Strictly necessary
Session and short-lived operational cookies
Required to run the website, authenticate users, keep sessions secure, prevent abuse, and support core product features.
Examples: authentication/session cookies used by Supabase, security cookies, request integrity mechanisms, and essential website storage.
Functional
Short-lived or persistent, depending on the feature
Used to remember interface or workflow preferences where we enable those features.
Examples: saved UI state, dismissed notices, document workflow preferences, or similar usability settings.
Payments and checkout
As determined by the payment provider
Used when you access hosted checkout or billing tools supplied by Stripe or similar providers.
Examples: Stripe-hosted checkout, subscription-management portal, fraud detection, and payment-session continuity.
Analytics or advertising
Would depend on the vendor and feature
Our current repository review did not identify active analytics or advertising trackers. If we introduce non-essential analytics, performance, or marketing technologies, we intend to update this policy and request consent where required.
Examples: no active Google Analytics, Hotjar, Mixpanel, Meta Pixel, or similar tracking scripts were identified in this code review.
3. Third-party technologies
Some cookies or similar technologies may be set by third-party providers that help us operate the service. These providers may include authentication, hosting, security, email, and payment vendors.
For example, if you enter a Stripe-hosted billing or checkout flow, Stripe may place cookies or similar tools subject to its own privacy and cookie practices.
4. Consent and legal basis
For users in the EEA and UK, strictly necessary cookies may generally be used without consent when they are required to provide the service you request. Non-essential analytics, functional, or advertising cookies should not be deployed until appropriate consent has been obtained.
For users in the United States, Canada, and Australia, cookie disclosure and consent requirements vary by jurisdiction, cookie type, and whether data is used for targeted advertising or cross-context profiling.
5. How to manage cookies
You can usually manage or disable cookies through your browser settings. Blocking certain cookies may affect login, checkout, session continuity, and other core features of the service.
We also intend to provide a consent mechanism or settings entry point before enabling any non-essential cookies on public-facing pages.
6. Do Not Track and similar signals
Browser-based "Do Not Track" signals do not currently operate as a universal technical standard. If we introduce targeted advertising or similar tracking, we may provide additional controls required by applicable law.
7. Updates to this policy
We may revise this Cookie Policy as our website, vendors, or legal obligations change. Material updates will be reflected by revising the effective date and, where appropriate, by providing additional notice.
8. Contact
Questions about cookies or website tracking practices may be sent to privacy@lexdraft.co.