Skip to content

Legal

Cookie Policy

Cookie use on nox.markets: strictly necessary session, CSRF, workspace and guest-cart cookies only. No ads cookies. No consent banner unless non-essential cookies exist.

Last updated: 16 September 2026
Operator: NOX AETERNA GROUP LLC, a Wyoming limited liability company, trading as nox.markets, 5830 E 2nd St, Ste 7000 #34506, Casper, WY 82609, USA
Related documents: Privacy Policy, Terms of Service

This Cookie Policy describes cookies and similar technologies on nox.markets. English only. B2B service.


1. Launch position

On the authenticated application (including /dashboard), we set strictly necessary cookies only: session, CSRF protection, and the workspace you last selected, as required to keep you signed in. There are no non-essential cookies on the app. There is no advertising cookie. There is no cross-site tracking pixel on /dashboard.

On the marketing site, the same rule applies: strictly necessary cookies only, unless a non-essential cookie is later introduced. If none exist, this page is the notice, in one place, and we will not show a consent banner that exists only to look like compliance. A banner appears only if a non-essential cookie exists.

If a marketing-site analytics vendor is added later, it becomes a subprocessor of website visitors the day it ships, listed on /legal/subprocessors, and this Policy will be updated before or with that change.


2. What we use at launch

Name / typeProviderPurposeDurationCategory
Session cookieNOX AETERNA GROUP LLCAuthenticated sessionSession or up to the session policy on /security (7-day idle, 30-day absolute)Strictly necessary
CSRF token cookieNOX AETERNA GROUP LLCPrevent cross-site request forgerySession-alignedStrictly necessary
Workspace cookie (nm_active_org)NOX AETERNA GROUP LLCKeep the workspace a signed-in user is working in365 daysStrictly necessary
Guest cart cookie (nm_cart)NOX AETERNA GROUP LLCKeep a cart you filled before signing in30 daysStrictly necessary
Cookie-preference record (only if a banner exists)NOX AETERNA GROUP LLCRemember non-essential consentStrictly necessary (to store a choice)

Payment. Checkout, when live, is processed by Stripe, Inc. Stripe may set cookies required to complete payment and detect fraud on Stripe-hosted or Stripe.js flows. Those are necessary to take payment. We do not store PAN.

Sign in with Google. When it is enabled, Google sign-in happens on Google’s domain, and Google’s cookies there follow Google’s policies. We receive an identity assertion, not an advertising profile.

Session storage. The /fit wizard keeps one session-storage flag so a reload does not count the same start twice. It holds no identifier and is not a third-party advertising identifier.

Exact cookie names can change with framework versions.


3. What we do not use at launch

  • Advertising or retargeting cookies
  • Social pixels on authenticated routes
  • Cross-site tracking for ads
  • A “we may use cookies to personalize your experience” clause covering Customer Content or model training

Strictly necessary cookies are used to provide the Service the user requested (session, security, guest cart, workspace selection). They are set without a consent prompt, subject to counsel’s review under Wyoming and other applicable US law.

Non-essential cookies, if added, will be off until consent (or another valid basis counsel approves). We will not pre-tick consent. We will not bundle consent for ads with account creation.


5. How to control cookies

Browsers can block or delete cookies. Blocking strictly necessary cookies will prevent sign-in and checkout. For third-party SSO and Stripe, use those vendors’ tools as well.

Do Not Track is not a substitute for this Policy; we still do not run advertising trackers on /dashboard.


6. Changes

Material changes to cookie use (especially adding a non-essential cookie) will be reflected here and, where required, emailed to the workspace owner or shown in a real consent UI. Last updated date will change.