Skip to content

Cookie Policy

Last updated September 2026

This policy explains the cookies and browser storage the Staxaxis public website uses, what each one is for, and how to change your choice. We keep this deliberately small: we use only first-party cookies and do not load third-party advertising, retargeting, or social-media tracking pixels.

Your choice

Strictly necessary cookies are always on because the site cannot work without them. Analytics is optional and stays off until you turn it on. You can change your decision at any time:

Strictly necessary

These are essential for signing in, security, and remembering your preferences. They cannot be switched off.

  • Session cookies (Better Auth) — keep you signed in and protect your session. Set only when you have an account and sign in. HttpOnly.
  • sx_consent — remembers your cookie choice so we do not ask again on every visit. Contains only a version number, an analytics yes/no flag, and the time you chose. Lasts one year.
  • staxaxis:consent (local storage) — a mirror of the same choice so it applies instantly on your next visit.
  • staxaxis:pageview-counted (session storage) — a per-session flag so an anonymous page visit is counted once. Cleared when you close the tab.
  • Payment cookies (Stripe) — set only if you begin a checkout, to process the payment securely.

We also record an anonymous, cookieless page and call-to-action count (no identifier stored on your device) to measure the conversion funnel. Because it stores nothing on your device and cannot identify you, it runs under legitimate interest and does not require consent.

Analytics (optional — off until you opt in)

When you turn analytics on, we record a first-party profile of your visit to understand how the site is used. This never leaves Staxaxis and is never sold or shared with advertisers.

  • sx_vid — a random first-party identifier that lets us count unique and returning visits without fingerprinting. Set only after you opt in. Lasts one year.
  • staxaxis:visit-tracked (session storage) — a per-session flag so your visit is profiled once per session. Set only with analytics consent.

With analytics consent, the visit profile may include:

  • Pages viewed, time on page, scroll depth, and which sections held your attention.
  • Coarse location — country, region, and city — derived from network edge headers (never your exact GPS).
  • Device, browser, and operating-system type (bucketed; the raw device string is not stored).
  • How you arrived — referring site and campaign (UTM) parameters.
  • If you are signed in, your account identity, so we can attribute the visit to your workspace.
  • Company identification via reverse-IP lookup (through our provider IPinfo). Your IP address is used transiently for this lookup only and is never stored; we keep only the resulting company name and domain, where available.

Managing cookies in your browser

Beyond the control above, you can clear or block cookies in your browser settings, and most browsers let you send a Global Privacy Control (GPC) signal. If we detect GPC, analytics stays off unless you explicitly turn it on. Blocking strictly necessary cookies may stop parts of the site from working.

Changes

If we change the categories or what they cover, we will update this policy and ask you to choose again. See our Privacy Policy for how we handle data more broadly.