Cookie Policy

Last updated: 2026-04-20

Draft: this document is a working placeholder. Counsel must review before public launch.

1. What cookies are

Cookies are small text files stored in your browser. Similar technologies (localStorage, sessionStorage, pixel tags) serve comparable purposes and are covered by this policy.

2. Categories we use

Strictly necessary

Required for authentication, session continuity, CSRF protection, and core feature delivery. These cannot be disabled.

  • access_token, refresh_token — HttpOnly session cookies.
  • engaxe.consent — your cookie preference itself, stored in localStorage.

Analytics (consent required)

Google Analytics 4 identifiers used to measure aggregate usage. We use Consent Mode v2 with default-denied; no analytics cookies are set until you opt in.

  • _ga, _ga_* — GA4 client identifiers, 13-month expiry.

Marketing (consent required)

Attribution and remarketing tags. Off by default; set only after explicit opt-in.

3. Managing your preferences

You can change or withdraw consent at any time.

You can also control cookies through your browser settings, though disabling strictly necessary cookies will break core functionality.

4. Third parties

5. Changes

Material changes will bump the consent version and re-prompt you for preferences.

6. Contact

privacy@engaxe.com