Cookies & browser storage

1. The marketing website

The current marketing pages serve their styles, scripts, images and videos from GEXNA’s own domain. We do not add advertising pixels, audience analytics or externally hosted fonts to these pages. The legal-document viewer does not store your document choices or introduce tracking cookies.

Hosting still processes technical requests, including IP addresses and request information, as explained in the Privacy notice. A statement about no marketing cookies is not a claim that no personal data is processed.

2. The application

On app.gexna.com, essential authentication and security storage keeps the session working. The authentication cookie is named __Host-xpress-session and uses Secure, HttpOnly and SameSite protections. It is a browser-session cookie; a server session can expire sooner, including after inactivity or an absolute time limit.

A language-preference cookie named xpress-ui-language can remain for up to one year. Local storage remembers requested language/theme preferences and can hold account-scoped workspace caches, recovery copies and session-change notifications. These records can use names beginning xpress-; the exact keys can vary with features and versions.

3. Purpose and duration

• Session/security storage: necessary to provide secure account access; the current server-side windows are described in the Privacy notice.
• Language preference cookie: up to one year, unless cleared earlier.
• Requested interface settings: remain in the browser until changed or removed.
• Workspace caches and recovery data: can remain until the relevant record or browser storage is cleared. Logging out alone should not be assumed to erase every locally cached draft.

Local storage is not a cookie and does not necessarily expire automatically. It is also not an authorisation token or a replacement for server-side access checks.

4. Control and optional technologies

You can remove or block cookies and site data through your browser settings. Removing app storage can end your session, reset preferences or delete unsynchronised local work. Save important work before clearing it. Browser controls do not automatically delete data already held on the server.

Only storage strictly necessary for a service you request may be used without consent where the law allows that exemption. Optional analytics or advertising, if introduced later, must be assessed and must remain off until valid consent where required. There is no optional analytics or advertising switch to accept in the current marketing website.

5. Third-party destinations

Opening X, n8n or a future hosted checkout takes you to a separate service with its own storage and notices. We do not load a future payment checkout merely because you open these legal documents. Read the destination’s information when you choose to visit it. Contact contact@gexna.com for a storage or privacy request.