Draft — pending legal review. This policy describes how NXT CLOUD actually works, but it has not yet been reviewed by a lawyer. Items in [brackets] still need to be completed.

Cookie Policy

The cookies NXT CLOUD sets and why. We only use strictly necessary cookies.

What we set

__Host-nxt_s — keeps you signed in (HttpOnly, Secure). Lasts up to 30 days.

__Host-nxt_csrf — protects forms against cross-site request forgery. Lasts up to 30 days.

__Host-nxt_mfa — holds a pending two-step sign-in for up to 10 minutes.

Your colour-theme choice is stored in your browser’s local storage, not a cookie.

What we don’t set

No advertising cookies, no third-party analytics cookies and no cross-site tracking. Because every cookie we use is strictly necessary, there is no cookie banner to dismiss. If that changes, we will ask for consent first and add controls here.

Third parties

If you complete a bot check, Cloudflare Turnstile may process limited technical signals for that check. Payment pages are hosted by our payment processor and governed by its policies.