Cookies are small files a site stores in your browser. Similar technologies — local storage, pixels, device fingerprints — do comparable things. This policy covers all of them.
We set no advertising cookies, run no third-party analytics, and load no third-party trackers, fonts or scripts on our website. The cookies below are the complete list.
1Our website (salexhub.ai)
The marketing site sets no cookies at all. It stores one preference in your browser's local storage:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| `theme` | Local storage | Remembers whether you chose light or dark appearance. Never sent to our servers. | Until you clear site data |
Because we set no cookies for analytics or advertising here, there is no consent banner to click through.
2The application (app.salexhub.ai)
The application uses strictly necessary cookies. Without them, sign-in and security do not work, so they are set on the basis of necessity rather than consent.
| Name | Purpose | Lifetime |
|---|---|---|
| `authjs.session-token` (`__Secure-` prefixed over HTTPS) | Keeps you signed in. HTTP-only and same-site, so page scripts cannot read it. | Session, extended while you remain active |
| `authjs.csrf-token` | Protects sign-in and form submissions against cross-site request forgery. | Session |
| `authjs.callback-url` | Returns you to the page you were on after signing in. | Session |
| `NEXT_LOCALE` | Remembers which language the interface answers in. Carries a display preference, not authority. | One year |
The application stores some interface preferences — such as appearance and layout choices — in your browser's local storage. They stay on your device.
3Analytics and forms on our customers' websites
We provide customers with a first-party analytics snippet, forms and embeddable components for their own websites. The snippet is cookieless and stores nothing on a visitor's device.
- A visitor is recognised by a hash computed from a daily rotating salt, so the same person cannot be linked from one day to the next unless they identify themselves.
- No IP address is stored; approximate country is derived at the edge and kept instead.
- Paid-click identifiers in a URL are classified as search or social and then discarded.
- Nothing tracks a visitor across websites operated by different customers.
The customer running the snippet is the controller of that data and is responsible for their own notice and, where their law requires it, consent. If you are a visitor to such a site and want your data removed, contact the site's operator; see section 13 of our Privacy Policy.
4Controlling cookies
You can delete or block cookies in your browser settings. Blocking the application's cookies will prevent you from signing in. Clearing local storage will reset your appearance and language preferences.
Browsers offer a “Do Not Track” signal. Because we run no tracking to disable, we take no action on it; we honour Global Privacy Control signals where the law requires it.
5Changes
If we introduce a cookie that is not strictly necessary, we will add it here and ask for consent before setting it. Questions: start@salexhub.ai.