Cookie Policy
- Effective
- Last updated
This document is awaiting legal review.
It describes how NexumeLab actually handles your data today and is published in good faith, but it has not yet been reviewed by a qualified lawyer. Wording may change once it has been.
NexumeLab sets three cookies. All three are strictly necessary to sign you in and keep you signed in safely. We run no analytics, no advertising trackers, and no session recording.
That is why there is no cookie banner on this site. Under the ePrivacy rules, cookies that are strictly necessary to deliver a service you asked for do not require consent. We still have to tell you about them, which is what this page is for.
The cookies we set
| Name | Purpose | Expires | Type |
|---|---|---|---|
access_token | Keeps you signed in as you move between pages | 1 hour | Strictly necessary |
refresh_token | Renews your session so you are not signed out mid-task | 7 days | Strictly necessary |
oauth_state | Protects the "Sign in with Google" handshake against cross-site request forgery | When you close your browser | Strictly necessary |
All three are HttpOnly, meaning JavaScript on the page cannot read them, and
all three are marked Secure in production, meaning they are only ever sent
over an encrypted connection.
What we store in your browser
Two small pieces of information are kept in your browser's own storage rather than in a cookie. Neither is sent to us and neither identifies you.
| Key | Purpose | Where |
|---|---|---|
color-theme | Remembers whether you chose light or dark mode | Local storage |
| Dismissal flags | Remembers that you closed a prompt so it does not reappear | Session storage |
What we do not do
- No Google Analytics, Google Tag Manager, or any other analytics product.
- No advertising or retargeting pixels — no Meta, no LinkedIn, no Google Ads.
- No session recording or heatmap tools.
- No third-party cookies of any kind.
- No cross-site tracking, and nothing sold to data brokers.
If that changes, we will ask for your consent before setting anything, and nothing non-essential will load until you have given it. We will update this page and the Privacy Policy at the same time.
Turning cookies off
You can block or delete cookies in your browser settings. Because all three of ours are strictly necessary, blocking them will sign you out and prevent you from signing back in. The public parts of the site — the landing page, the guides, the blog, and published portfolios — work fine without them.
The browser extension
Our browser extension uses your existing NexumeLab session cookie to talk to our API on your behalf. It does not set cookies of its own and it does not read cookies belonging to any other site. What it does read is described in the Privacy Policy and in the extension's store listing.