Cookie Policy
Version: 2026-11-08
Controller/website operator: SiteAxis. Effective date: November 8, 2026. Cookie preference entry point: the Cookie preferences link in the site footer. This notice supplements Privacy Policy and covers technologies used on the public website and authenticated application.
1. What technology is covered
Cookies, first-party and third-party identifiers, localStorage/sessionStorage, software development kits, pixels, tags, embedded content and related browser/device identifiers can be used to keep the site usable and, if lawfully activated, to measure performance or marketing effectiveness.
2. Categories and choices
| Category | Purpose | Default / draft status | Choice |
|---|---|---|---|
| Strictly necessary | Authentication, sessions, anti-abuse and required site functions | Required; listed in Section 4 | Not switchable through optional consent control |
| Optional preferences | Non-essential presentation choices | Off by default | Opt-in or jurisdictionally appropriate choice |
| Analytics | Website/product usage measurement | Off by default | Not activated solely because consent is stored |
| Marketing | Advertising/campaign measurement | Off by default; provider setup not established | Opt-in/other lawful control as applicable |
| Session replay | Behaviour/session recording | Disabled unless separately introduced with appropriate notice and controls | Must not activate without separate approval and notice |
The actual inventory and operational state take precedence over this categorization. If a cookie becomes necessary for a new approved service, its identity and justification must be documented.
3. Your choices
The preference manager offers Accept all, Reject non-essential, Manage preferences and Save preferences. Necessary technologies remain enabled. Optional choices are stored with a version and timestamp in this browser. Selecting a category does not authorize undisclosed providers or purposes.
4. Cookie and storage inventory
| Identifier | Cookie or storage | Provider/domain | Purpose | Expiration | Strictly necessary? | Before/after consent | Inventory status |
|---|---|---|---|---|---|---|---|
siteaxis.cookieConsent.v1 | localStorage | SiteAxis frontend | Store choices and version | Until local storage removal or version replacement | Consent operation | Set upon choice | Verified November 8, 2026 |
sb-<project>-auth-token (may be split into numbered parts) | Cookie | app.siteaxis.app (first party; Supabase Auth) | Auth/session | Signed-in session; ends at sign-out, after 9 hours of inactivity or at most 7 days | Yes | Set at sign-in; not subject to optional consent | Verified November 8, 2026 |
siteaxis_active_company_id, siteaxis_active_project_id | Cookie | app.siteaxis.app | Remember the selected company and project | 1 year | Yes | Set when you choose a workspace | Verified November 8, 2026 |
siteaxis_locale | Cookie | app.siteaxis.app | Remember the interface language | 1 year | Yes | Set when you choose a language | Verified November 8, 2026 |
siteaxis_mfa_trusted_device | Cookie | app.siteaxis.app | Remember a device you chose to trust for multi-factor sign-in | Up to 30 days | Yes | Set only if you choose it | Verified November 8, 2026 |
siteaxis_social_*, fa_ms_oauth, siteaxis_pending_verification | Cookie | app.siteaxis.app | Protect Google/Microsoft sign-in and email verification steps | 10 minutes | Yes | Set only during sign-in | Verified November 8, 2026 |
__stripe_mid, __stripe_sid | Cookie | Stripe (checkout pages only) | Fraud prevention during payment | Up to 1 year | Yes | Set only on payment pages | Provider-documented |
No analytics, advertising or session-replay technology is currently active.
5. Preference controls and withdrawal
A visible banner offers optional preferences where appropriate. To change a decision, follow the Cookie preferences link in the site footer, the application's/footer's Cookie preferences link or browser controls. Choices may need to be repeated for a different device or browser. Blocking required cookies may prevent login or protected workflow operation. Withdrawal should prevent future loading of optional technology; any prior processing remains governed by applicable law.
6. Third-party technologies
Approved analytics, hosting, authentication, billing or embedded providers may set their own cookies subject to provider and SiteAxis choices. The verified inventory must give each provider's identity, purpose, data category and link to its relevant notice. Any newly introduced optional provider will be reflected in the inventory and subject to the applicable notice and choices. Third-party pages opened outside SiteAxis operate under their own policies.
7. Location and data protection
Depending on active provider configuration, cookie data and related metadata may be processed in other jurisdictions. See Privacy Policy and the subprocessor list. Browser signals, including Global Privacy Control where legally binding, will be handled as required by applicable law. Optional tracking is not currently active.
8. Changes and contact
We will update this notice when the actual provider/technology inventory changes materially and provide required notice or consent reset. Write to privacy@siteaxis.app for questions. Last audited cookie/network inventory: November 8, 2026 by SiteAxis.
Questions about these documents?
Contact the SiteAxis team for help with a policy or agreement.