Legal
Cookie Policy
Cookie use on nox.markets: strictly necessary session, CSRF, workspace and guest-cart cookies only. No ads cookies. No consent banner unless non-essential cookies exist.
Last updated: 16 September 2026
Operator: NOX AETERNA GROUP LLC, a Wyoming limited liability company, trading as nox.markets, 5830 E 2nd St, Ste 7000 #34506, Casper, WY 82609, USA
Related documents: Privacy Policy, Terms of Service
This Cookie Policy describes cookies and similar technologies on nox.markets. English only. B2B service.
1. Launch position
On the authenticated application (including /dashboard), we set strictly necessary cookies only: session, CSRF protection, and the workspace you last selected, as required to keep you signed in. There are no non-essential cookies on the app. There is no advertising cookie. There is no cross-site tracking pixel on /dashboard.
On the marketing site, the same rule applies: strictly necessary cookies only, unless a non-essential cookie is later introduced. If none exist, this page is the notice, in one place, and we will not show a consent banner that exists only to look like compliance. A banner appears only if a non-essential cookie exists.
If a marketing-site analytics vendor is added later, it becomes a subprocessor of website visitors the day it ships, listed on /legal/subprocessors, and this Policy will be updated before or with that change.
2. What we use at launch
| Name / type | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| Session cookie | NOX AETERNA GROUP LLC | Authenticated session | Session or up to the session policy on /security (7-day idle, 30-day absolute) | Strictly necessary |
| CSRF token cookie | NOX AETERNA GROUP LLC | Prevent cross-site request forgery | Session-aligned | Strictly necessary |
Workspace cookie (nm_active_org) | NOX AETERNA GROUP LLC | Keep the workspace a signed-in user is working in | 365 days | Strictly necessary |
Guest cart cookie (nm_cart) | NOX AETERNA GROUP LLC | Keep a cart you filled before signing in | 30 days | Strictly necessary |
| Cookie-preference record (only if a banner exists) | NOX AETERNA GROUP LLC | Remember non-essential consent | Strictly necessary (to store a choice) |
Payment. Checkout, when live, is processed by Stripe, Inc. Stripe may set cookies required to complete payment and detect fraud on Stripe-hosted or Stripe.js flows. Those are necessary to take payment. We do not store PAN.
Sign in with Google. When it is enabled, Google sign-in happens on Google’s domain, and Google’s cookies there follow Google’s policies. We receive an identity assertion, not an advertising profile.
Session storage. The /fit wizard keeps one session-storage flag so a reload does not count the same start twice. It holds no identifier and is not a third-party advertising identifier.
Exact cookie names can change with framework versions.
3. What we do not use at launch
- Advertising or retargeting cookies
- Social pixels on authenticated routes
- Cross-site tracking for ads
- A “we may use cookies to personalize your experience” clause covering Customer Content or model training
4. Legal bases
Strictly necessary cookies are used to provide the Service the user requested (session, security, guest cart, workspace selection). They are set without a consent prompt, subject to counsel’s review under Wyoming and other applicable US law.
Non-essential cookies, if added, will be off until consent (or another valid basis counsel approves). We will not pre-tick consent. We will not bundle consent for ads with account creation.
5. How to control cookies
Browsers can block or delete cookies. Blocking strictly necessary cookies will prevent sign-in and checkout. For third-party SSO and Stripe, use those vendors’ tools as well.
Do Not Track is not a substitute for this Policy; we still do not run advertising trackers on /dashboard.
6. Changes
Material changes to cookie use (especially adding a non-essential cookie) will be reflected here and, where required, emailed to the workspace owner or shown in a real consent UI. Last updated date will change.
