We set no advertising, analytics, or tracking cookies anywhere. This website carries no analytics scripts, no advertising pixels, and no third-party tracking of any kind. That is also why you are not asked to dismiss a consent banner: there is nothing here that requires consent.
The pages on hexasentra.com set no cookies at all. No session cookie, no preference cookie, no analytics identifier. You can verify this in your browser's developer tools.
The only third party these pages contact is Google Fonts, which serves the typefaces. Loading a font means Google receives your IP address and user-agent as part of that request. It sets no cookie. If you would rather avoid it entirely, a content blocker or a browser configured to block fonts.googleapis.com will fall back to system fonts and the site remains fully usable.
When you sign in at app.hexasentra.com, we use exactly one cookie:
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
| hxs_session | Keeps you signed in and ties your requests to your account. Holds an opaque random token — no personal data is encoded in it. | Strictly necessary | 12 hours, or until you sign out |
It is set HttpOnly (scripts cannot read it), Secure (sent only over HTTPS), and SameSite=Lax. Lax rather than Strict is deliberate: Strict would break invitation links arriving from email, where you follow a link and need your existing session to be recognised.
A strictly necessary cookie does not require consent under the GDPR or the ePrivacy Directive, because without it you simply cannot log in. We use no other cookies in the application.
Because we set only a strictly necessary session cookie, there is nothing to opt out of. Blocking cookies for app.hexasentra.com in your browser will prevent you signing in, which is the expected consequence. Clearing cookies signs you out.
If we ever introduce a cookie that is not strictly necessary, we will ask for consent before setting it and update this page first. Questions: privacy@hexasentra.com.