Legal
Cookie Policy
Last updated: 2026-06-10
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, authenticate your session, and understand how you interact with the site. Cookies may be “first-party” (set by our domain) or “third-party” (set by external services we use).
2. Cookies We Use
2.1 Essential Cookies (Always Active)
These cookies are necessary for the Site to function. They cannot be disabled. They are set in response to actions you take, such as logging in or setting privacy preferences.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
cx_session | Authentication session token (Better Auth) | Session | First-party |
cx_csrf | Cross-site request forgery protection | Session | First-party |
__cf_bm | Cloudflare bot detection and security | 30 minutes | Third-party |
cf_clearance | Cloudflare challenge clearance proof | 30 minutes | Third-party |
2.2 Analytics Cookies
We use Vercel Analytics for anonymous usage measurement. These cookies collect aggregated, non-personally-identifiable data:
| Cookie | Purpose | Duration | Data Collected |
|---|---|---|---|
_va | Anonymous page view tracking | Session | Page URL, referrer, viewport size |
_vercel_insights | Core Web Vitals & performance | Persistent | LCP, FID, CLS metrics |
Vercel Analytics does NOT use fingerprinting, cross-site tracking, or personally identifiable information. No IP addresses are stored. See Vercel Analytics Privacy.
2.3 Cookies We Do NOT Use
- Advertising or retargeting cookies
- Social media tracking cookies
- Cross-site tracking cookies
- Fingerprinting scripts
- Marketing automation tracking pixels
3. Third-Party Services and Cookies
Our infrastructure provider Cloudflare sets minimal security cookies (__cf_bm, cf_clearance) for bot detection and DDoS protection. These are essential for site security and do not track you across sites.
We do not embed third-party content (social media widgets, ad networks, tracking pixels) that would set additional cookies.
4. Your Cookie Choices
4.1 Browser Controls
You can control and delete cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies and other site data
- Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Cookies and website data
- Edge: Settings → Cookies and site permissions
4.2 Opt-Out of Analytics
You can opt out of Vercel Analytics by enabling “Do Not Track” in your browser settings. We respect DNT signals.
4.3 Effect of Disabling Cookies
Disabling essential cookies will prevent you from logging into your account. Disabling analytics cookies has no impact on site functionality.
5. Legal Compliance
5.1 GDPR / ePrivacy Directive (EEA/UK)
- Essential cookies are set under the “strictly necessary” exemption (ePrivacy Directive Art. 5(3) / UK PECR Reg. 6).
- Analytics cookies are set only after implied consent via continued browsing, as they collect no personal data (GDPR Art. 6(1)(f) — legitimate interest).
- You may withdraw consent at any time via browser settings.
5.2 CCPA (California)
- Our cookie usage does not constitute a “sale” or “sharing” of personal information under the CCPA.
- No opt-out mechanism is required as we do not use cookies for cross-context behavioral advertising.
5.3 Other Jurisdictions
Our minimal cookie approach is designed to comply with global privacy regulations including LGPD (Brazil), PIPEDA (Canada), APPI (Japan), and PDPA (Singapore). If you have jurisdiction-specific questions, contact privacy@correlatex.com.
6. Cookie List Updates
We review our cookie usage quarterly and update this policy accordingly. The last review was completed on 2026-06-10. No changes were made.
7. Contact
For questions about our cookie practices:
- Email: privacy@correlatex.com
- Subject line: “Cookie Policy Inquiry”