Cookie Policy
Effective date: [DATE] Last updated: [DATE]
This Cookie Policy explains how [LEGAL ENTITY NAME] ("Underpeaks", "we", "us") uses cookies and similar technologies on underpeaks.com and studio.underpeaks.com.
It should be read together with our Privacy Policy.
1. What cookies are
Cookies are small text files placed on your device when you visit a website. They allow the site to remember your actions and preferences over time. We also use similar technologies such as local storage and session storage, which work in a comparable way. In this policy, "cookies" covers all of these.
2. How we use cookies
We group cookies into three categories. You can accept or reject the non-essential categories using our cookie banner or by visiting [COOKIE SETTINGS URL].
2.1 Strictly necessary
These are required for the service to function and cannot be switched off. They do not require consent.
| Cookie | Purpose | Duration |
|---|---|---|
nxf_access_token | Authenticates your session. httpOnly and not readable by scripts. | Session / [1 hour] |
nxf_refresh_token | Allows your session to be renewed without re-entering credentials. httpOnly. | [7 days] |
nxf_user_id | Identifies the signed-in user within the console. | [30 days] |
nxf_project_id | Remembers your currently active project. | [30 days] |
nxf_deployment_type | Distinguishes hosted from self-hosted behaviour. | [30 days] |
nxf_consent | Records your cookie preferences so we do not ask again. | [12 months] |
NEXT_LOCALE | Remembers your language preference. | [12 months] |
[CONFIRM durations against your actual cookie settings — the values above are taken from observed cookies and should be verified.]
2.2 Analytics
These help us understand how the service is used so we can improve it. They are only set if you consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| [ANALYTICS COOKIES] | [PROVIDER] | Aggregated usage statistics, feature adoption, page views | [DURATION] |
[CONFIRM: list your actual analytics provider and cookies, or remove this section entirely if you do not run analytics. Your consent banner currently offers an analytics category, so it should either be populated or removed.]
2.3 Marketing
These are used to measure the effectiveness of our marketing and, where applicable, to show relevant content. They are only set if you consent.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| [MARKETING COOKIES] | [PROVIDER] | Campaign attribution, conversion measurement | [DURATION] |
[CONFIRM: same as above. If you are not running marketing pixels, remove this category from both the banner and this policy — offering a category you do not use is a compliance inconsistency.]
We do not display third-party advertising in the product, and we do not sell your data to advertisers.
3. Third-party services
Some third parties may set cookies when their functionality is used:
| Service | Purpose | More information |
|---|---|---|
| Google reCAPTCHA | Distinguishes humans from bots on our contact and signup forms | Google Privacy Policy |
| Vercel | Hosting and content delivery; may set functional cookies for routing and security | Vercel Privacy Policy |
| Paddle | Payment processing during checkout | Paddle Privacy Policy |
| PayFast | Payment processing during checkout (South Africa) | PayFast Privacy Policy |
4. Managing your preferences
Through our banner. When you first visit, you can accept all, reject non-essential, or choose categories. You can change your choice at any time at [COOKIE SETTINGS URL].
Through your browser. Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies will prevent you from signing in and using the service.
- Chrome: Settings → Privacy and security → Third-party cookies
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy
- Edge: Settings → Cookies and site permissions
Do Not Track. Our service does not currently respond to Do Not Track browser signals, as there is no common standard for how to interpret them.
5. Changes to this policy
We may update this policy as our use of cookies changes. Material changes will be reflected in the "last updated" date and, where required, we will ask for your consent again.
6. Contact
Questions about this policy: [PRIVACY EMAIL]