Cookie policy
Draft: text not yet reviewed by a lawyer.
1. What cookies and similar technologies are C01
Cookies are small text files that a website stores in your browser. Similar technologies, such as the local storage and session storage of the browser, do the same job: they keep a small piece of information on your device. In this policy "cookies" means both. Codelux AI uses them to make the Service work, to remember your choices and, only with your consent, to measure use or for marketing.
The controller is (). Personal data collected through cookies is handled as described in the privacy policy.
2. Categories C02
- Necessary: needed for the Service to work or to keep a setting you asked for (staying signed in, security, language and theme you chose, your cookie choice). They are always on and need no consent.
- Preferences: remember optional settings beyond those you asked for. Used only with your consent.
- Statistics: help us understand how the Service is used, to improve it. Used only with your consent.
- Marketing: measure or support advertising and campaigns. Used only with your consent.
Each cookie and external service we use is listed in the table at the end of this page, with its category, provider, purpose and duration. If a category does not appear in the table, we do not use it.
3. How to choose and change your choice C03
- When a non-necessary category is used, a banner lets you accept all, refuse all, or choose by category.
- Closing the banner without choosing counts as refusing the non-necessary categories.
- You can change your choice at any time with the "Manage cookies" link in the footer of every page and in Settings. Withdrawing consent is as easy as giving it.
- Every choice is also recorded as a consent event, so that you can see it in your history ("Download my consents" in Settings › Privacy and consents).
4. How your choice is stored C04
- Your choice is stored on your device, for each domain of the Service, in a necessary cookie that also holds the version of this policy you answered.
- When this policy changes in a way that matters (for example a new cookie or service), a new version is published and the banner asks you again.
- The choice lasts up to 6 months; after that we ask again.
5. Browser settings and third parties C05
- You can also block or delete cookies in your browser settings. If you block the necessary ones, parts of the Service (such as staying signed in) will not work. Deleting the cookies of this site also deletes your cookie choice, and the banner will ask again.
- Some external services we use (listed in the table) may set their own cookies under their own policies; follow the link in the table to read them.
Cookies used
| Name | Category | Whose | Purpose | Duration |
|---|---|---|---|---|
| pf_session | Necessary | Codelux AI | Keeps you signed in (random token; the server keeps only its fingerprint). | 30 days |
| pf_web | Necessary | Codelux AI | Encrypted state of the page you are using (sign-in steps, form protection, one-time messages). | Browser session |
| pf_trust | Necessary | Codelux AI | Remembers a device you marked as trusted, so the email code is not asked every time. | Up to 30 days |
| pf_lang | Necessary | Codelux AI | Remembers the language you chose with the language switch (set only when you choose). | 1 year |
| pf_theme | Necessary | Codelux AI | Remembers the light or dark theme you chose (set only when you choose). | 1 year |
| pf_ref | Necessary | Codelux AI | Remembers the referral link you opened, so the friend who invited you receives the credit when you sign up. | 30 days |
| pf_channel | Necessary | Codelux AI | Only for the provider's developers: sends their requests to the development version of the product. | 30 days |
| pf_saml | Necessary | Codelux AI | Single sign-on with your organisation (SAML): carries the request to your identity provider and back. | A few minutes |
| pf_cookies | Necessary | Codelux AI | Stores your cookie choice and the version of this policy you answered, so the banner is not shown again. | 6 months |
| __cf_bm, cf_clearance | Necessary | Cloudflare | Protection of the site against bots and attacks (Cloudflare, our network provider). | 30 minutes to 1 year |
| clx_token, clx_user (browser local storage) | Necessary | Codelux AI | Keeps you signed in on the website and the console (sign-in token and cached profile). | 30 days |
| clx_cookie_prefs (browser local storage) | Necessary | Codelux AI | Stores your cookie choice. | Until you change it or clear the site data |
| clx_sib | Necessary | Codelux AI | Ties a sign-in with an external provider or single sign-on to the browser that started it, so nobody else can complete it. Random value, no personal data; set only when you start such a sign-in. | 2 hours |
| clx_maint | Necessary | Codelux AI | Administrator only: unlocks the site while it is in maintenance mode. | 7 days |
| clx-admin-theme, clx_theme, clx_lang (browser local storage) | Necessary | Codelux AI | The theme (light or dark) and the language you chose; written only when you choose. | Until you change them or clear the site data |
| clx_sid (browser local storage) | Statistics | Codelux AI | Visitor identifier used to count page visits, only with your consent. | Until you withdraw consent or clear the site data |
| clx_attr (browser local storage) | Statistics | Codelux AI | Remembers which link or campaign brought you here, saved to your account at sign-up only if you consented. | Until you withdraw consent or clear the site data |
Third-party services
| Name | Category | Whose | Purpose | Policy |
|---|---|---|---|---|
| Stripe | Necessary | Stripe Payments Europe Ltd. | Payments: when you pay you are taken to Stripe's checkout page, which sets its own cookies for payment security and fraud prevention. | stripe.com |