Cookies & browser storage

The current marketing pages serve their styles, scripts, images and videos from GEXNA’s own domain. We do not add advertising pixels, audience analytics or externally hosted fonts to these pages. The legal-document viewer does not store your document choices or introduce tracking cookies.

Hosting still processes technical requests, including IP addresses and request information, as explained in the Privacy notice. A statement about no marketing cookies is not a claim that no personal data is processed.

On app.gexna.com, essential authentication and security storage keeps the session working. The authentication cookie is named __Host-xpress-session and uses Secure, HttpOnly and SameSite protections. It is a browser-session cookie; a server session can expire sooner, including after inactivity or an absolute time limit.

A language-preference cookie named xpress-ui-language can remain for up to one year. Local storage remembers requested language/theme preferences and can hold account-scoped workspace caches, recovery copies and session-change notifications. These records can use names beginning xpress-; the exact keys can vary with features and versions.

An authenticated session expires after 30 minutes of inactivity or, at the latest, 7 days after the session was created. Activity handled with session refresh extends the inactivity deadline but not the 7-day maximum. An anonymous authentication session lasts up to 10 minutes. Logout or revocation may end a session earlier. These are server-side access lifetimes, not deletion deadlines for all account data. The authentication cookie is a browser-session cookie. Expired or revoked session records become eligible for periodic cleanup; physical deletion exactly at expiry is not promised.

The language cookie may remain for up to a year. Requested interface settings and local working copies remain until changed or removed in the browser. Logout may not erase local drafts; clearing browser storage does not erase server data.

You can remove or block cookies and site data through your browser settings. Removing app storage can end your session, reset preferences or delete unsynchronised local work. Save important work before clearing it. Browser controls do not automatically delete data already held on the server.

Only storage strictly necessary for a service you request may be used without consent where the law allows that exemption. Optional analytics or advertising, if introduced later, must be assessed and must remain off until valid consent where required. There is no optional analytics or advertising switch to accept in the current marketing website.

Opening X, n8n or a future hosted checkout takes you to a separate service with its own storage and notices. We do not load a hosted payment checkout merely because you open these legal documents. Read the destination’s information when you choose to visit it. Contact contact@gexna.com for a storage or privacy request.