Cookie Policy

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember information about your visit, such as your login session or preferences, making your next visit easier and the site more useful to you.

Similar technologies include local storage, session storage, and pixel tags, which we use for analogous purposes. References to 'cookies' in this policy include all such technologies.

We use the following categories of cookies on Elexa:

• Strictly necessary cookies: Required for the Platform to function. These include your authentication token, session identifiers, and CSRF protection tokens. The Platform cannot operate without these cookies and they cannot be disabled.
• Functional cookies: Store your preferences such as your chosen language, notification settings, and UI state. Disabling these may affect the quality of your experience.
• Analytics cookies: Help us understand how users interact with the Platform — which pages are visited, how long sessions last, and where errors occur. This data is aggregated and anonymised. We use this to improve the Platform.
• Security cookies: Help us detect and prevent fraudulent activity, including unusual login behaviour and bot activity.

When you log in to Elexa, we store an encrypted access token and refresh token in secure, HTTP-only cookies. These are essential for keeping you logged in and protecting your session from interception.

• Access token cookie: Short-lived (typically 15–60 minutes). Used to authenticate each request to our API.
• Refresh token cookie: Longer-lived. Used to obtain a new access token when the current one expires without requiring you to log in again.
• Both cookies are marked HTTP-only (inaccessible to JavaScript) and Secure (transmitted only over HTTPS).

Some third-party services integrated into the Platform may set their own cookies:

• reCAPTCHA (Google): Used on login and registration pages to distinguish human users from bots. Subject to Google's Privacy Policy.
• Google OAuth: If you use 'Sign in with Google', Google may set cookies as part of the OAuth flow. Subject to Google's Privacy Policy.
• Analytics providers: We may use anonymised analytics tools that set their own cookies to track aggregate usage patterns.

We do not use advertising cookies or track your activity across other websites.

Cookies on Elexa fall into two duration categories:

• Session cookies: Temporary cookies that are deleted when you close your browser. Used for your active login session and temporary UI state.
• Persistent cookies: Remain on your device for a set period (ranging from 7 days to 12 months). Used for refresh tokens and preference settings.

You have several options for managing or disabling cookies:

• Browser settings: Most browsers allow you to view, block, or delete cookies via their settings menu. Refer to your browser's help documentation for instructions.
• Opt-out tools: For analytics cookies, you may use browser extensions such as uBlock Origin or opt-out mechanisms provided by the analytics provider.
• Account settings: You can manage notification preferences and session data directly within your Elexa account settings.

Please note that disabling strictly necessary cookies will prevent you from using the Platform, as they are required for authentication and security. Disabling functional cookies may result in a degraded experience.

We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our practices. When we make material changes, we will update the 'Last updated' date and notify you where appropriate.