Cookie Policy
We use cookies and similar technologies on nxted.ai. This policy explains what they are, what we use them for, and how you control them. We comply with the UK Privacy and Electronic Communications Regulations 2003 (PECR) and the ICO's 2025 guidance on cookie consent.
1. What is a cookie?
A cookie is a small text file a website places on your device. We also use related technologies (web beacons, localStorage, fingerprint protections). Where this policy says "cookie" we mean all of these together.
2. Categories of cookies we use
| Category | Purpose | Consent required? |
|---|---|---|
| Strictly necessary | Authentication, session persistence, security (CSRF), load balancing | No - exempted under regulation 6(4) PECR |
| Analytics | Google Analytics 4 with IP anonymisation; aggregate usage statistics | Yes - your consent |
| Marketing | Currently not used. If we add any, we will update this page and request fresh consent. | Yes - your consent |
3. Specific cookies
| Name | Purpose | Duration | First/third party |
|---|---|---|---|
__Secure-authjs.session-token | NextAuth session | 30 days | First |
authjs.csrf-token | CSRF protection | Session | First |
nxted-consent-v1 | Stores your cookie consent choices | 12 months | First |
_ga, _ga_* | Google Analytics user/session | 2 years / 24 hours | Third (Google) |
4. How we obtain your consent
When you first visit nxted.ai, you see a cookie banner. Strictly necessary cookies load immediately because they are essential to the operation of the site. Analytics and marketing cookies do not load until you click Accept all. The banner also offers an equally prominent Essential only button - per the ICO's 2025 guidance on dark patterns.
5. Changing your preferences
You can change your choices at any time:
- Click the cookie icon at the bottom of any page (coming soon - currently you can clear the
nxted-consent-v1localStorage entry to reset). - Use your browser's settings to block or delete cookies - note this may impair authentication.
- For Google Analytics specifically: Google Analytics opt-out.
6. International data flows from analytics
Google Analytics 4 may transfer aggregated, IP-anonymised data to the United States. We rely on the EU-US Data Privacy Framework (for EU data) and the UK Extension to the DPF (for UK data). See the Privacy Policy for our overall international transfer position.
7. Contact
Questions about cookies: dpo@nxted.ai.
OFORO LTD · Registered in England & Wales · Company No. 16787568 · Unit 8 Lyon Road, Milton Keynes, England, MK1 1EX
Questions: legal@nxted.ai · DPO: dpo@nxted.ai