Cookie Policy
This Cookie Policy ("Policy") explains how Nxera Digital LLC ("Nxera," "we," "us," "our") uses cookies and similar tracking technologies on: getnxera.com and all of its subdomains; websites Nxera hosts on behalf of Clients at *.getnxera.com (each, a "Hosted Site"); and the Nxera client portal (collectively, the "Sites"). This Policy is incorporated into the Nxera Privacy Policy and the Nxera Terms of Service.
By accessing or using the Sites, you acknowledge that you have read this Policy. Where consent is required by applicable law, your continued use after notice constitutes acceptance to the extent permitted by law.
1. What Are Cookies and Similar Technologies?
A "cookie" is a small text file placed on your device when you visit a website. Cookies allow the website to recognize your device and remember information about your visit. We also use similar technologies including local storage, session storage, web beacons, pixels, server-side log files, fingerprinting in limited security contexts, and software development kit (SDK) identifiers (collectively with cookies, "Tracking Technologies"). For brevity we refer to all of them as "cookies" in this Policy.
Cookies can be:
- First-party (set by the domain you are visiting) or third-party (set by another domain whose content is loaded on the page);
- Session (deleted when you close your browser) or persistent (remain until they expire or you delete them);
- Strictly necessary, functional, analytics, or advertising (we do not use advertising cookies).
2. Categories of Cookies We Use
2.1 Strictly Necessary Cookies
These cookies are essential for the Sites to function. Without them, you cannot log in, complete transactions, maintain a session, or use core features. Strictly necessary cookies do not require consent under any applicable law.
| Cookie / Token | Purpose | Provider | Duration |
|---|---|---|---|
sb-access-token |
Authenticates your portal session | Supabase Auth (first-party) | Session |
sb-refresh-token |
Maintains session continuity | Supabase Auth (first-party) | 30 days |
__cf_bm |
Bot management and fraud prevention | Cloudflare (third-party) | 30 minutes |
__cf_clearance |
Bot challenge state | Cloudflare (third-party) | 30 minutes |
__stripe_* |
Payment-form security and fraud prevention | Stripe (third-party) | Up to 1 year |
| CSRF tokens | Cross-site request forgery prevention | Nxera (first-party) | Session |
2.2 Functional Cookies
These cookies remember your preferences and improve your experience. They are not strictly necessary but materially improve usability.
| Cookie | Purpose | Duration |
|---|---|---|
nxera_dismissed_notices |
Remembers banners/notices you have dismissed | 1 year |
nxera_ui_prefs |
Remembers your portal layout preferences | 1 year |
2.3 Analytics Cookies
We use privacy-respecting, primarily server-side analytics to understand how visitors use the Sites. We collect aggregate data and do not build personal profiles. We do not use Google Analytics, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, or any third-party advertising or remarketing tracker on the Sites at this time.
| Mechanism | Purpose | Storage |
|---|---|---|
| Server-side request logs | Page views, traffic sources, conversion events (anonymized) | Aggregated; not stored client-side |
2.4 Advertising/Marketing Cookies
We do not currently use advertising or marketing cookies on the Sites. If we ever introduce them, we will update this Policy, deploy a consent banner where required, and provide a clear opt-out before activation.
3. Cookies on Hosted Client Sites
Hosted Sites at [clientslug].getnxera.com are operated by Nxera's Clients. The cookies set on those sites can include:
(a) Strictly necessary cookies set by Nxera infrastructure (Cloudflare, the Hosted Site's framework);
(b) Cookies set by Stripe if the Client enables payments;
(c) Cookies set by any third-party widget the Client requests Nxera to embed (chat, forms, video, social embeds).
The Client operating a given Hosted Site is the controller of cookie data on that site and is solely responsible for cookie disclosure, consent, and compliance with applicable law on that site. Nxera provides infrastructure and tooling but does not control which third-party widgets a Client adds or the cookie practices of those widgets. Visitors to a Hosted Site should consult that Client's own cookie disclosure or privacy policy.
4. Your Choices
4.1 Browser Controls
You can configure your browser to refuse some or all cookies, to delete existing cookies, or to alert you when cookies are being set. Each browser is different; consult your browser's help documentation. Disabling strictly necessary cookies will prevent the Sites from functioning correctly, including preventing login and payment.
4.2 Mobile Device Controls
On mobile devices, you can manage tracking permissions in your operating-system settings (e.g., iOS App Tracking Transparency, Android Advertising ID controls).
4.3 Do Not Track (DNT)
Some browsers send a "Do Not Track" (DNT) signal. There is no industry consensus on how to interpret DNT signals; we do not currently respond to DNT signals. We do, however, refrain from selling or sharing Personal Data and we honor opt-out signals required by applicable law as described below.
4.4 Global Privacy Control (GPC)
Where required by applicable law (e.g., for California residents under CCPA/CPRA), we honor the Global Privacy Control signal as a valid request to opt out of the sale or sharing of Personal Data. As stated in our Privacy Policy, we do not sell or share Personal Data, so the practical effect of GPC on our practices is limited; we still log GPC signals received as a record of compliance.
4.5 California Residents (CCPA/CPRA)
California residents have additional rights under the CCPA/CPRA, including the right to opt out of the sale or sharing of personal information. Nxera does not sell or share personal information and does not currently use cookies for cross-context behavioral advertising, so no separate sale/share opt-out mechanism is required for cookie data. To exercise other CCPA rights (access, deletion, correction, portability), see our Privacy Policy.
4.6 Other US States
Residents of states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, Florida, Delaware, New Jersey, New Hampshire, Maryland, Minnesota, Rhode Island, and any others as they take effect) have equivalent rights as described in our Privacy Policy.
4.7 Future International Compliance
Nxera currently provides Services to U.S. Clients. If we expand to jurisdictions that require explicit prior consent for non-essential cookies (such as the European Union under GDPR/ePrivacy, the United Kingdom under PECR, Brazil under LGPD, or Canada under PIPEDA), we will deploy a consent banner that meets local requirements before enrolling Clients in those jurisdictions.
5. Third-Party Cookies and Data Recipients
The following third parties may set cookies on the Sites or receive cookie-related data:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Stripe, Inc. | Payment processing, fraud prevention | https://stripe.com/privacy |
| Cloudflare, Inc. | Bot mitigation, performance, DDoS protection | https://www.cloudflare.com/privacypolicy |
| Supabase, Inc. | Authentication, session management, database | https://supabase.com/privacy |
| Vercel Inc. | Hosting and content delivery | https://vercel.com/legal/privacy-policy |
| Google LLC | Font delivery, Places data | https://policies.google.com/privacy |
We do not control these third parties or their cookie practices. We recommend reviewing their privacy policies. The current Sub-processor list is also published in the Data Processing Addendum and at getnxera.com/sub-processors.
6. How Long We Retain Cookie Data
Cookie data is retained for the duration of the cookie as listed in Section 2 (or for the period stated by the third-party provider). Aggregated server-side analytics data is retained on the same schedule as application logs (up to 24 months) per our Privacy Policy.
7. Disputes
Any dispute arising out of or relating to this Policy is subject to the dispute-resolution provisions of the Terms (Section 16), including binding individual arbitration, class-action waiver, and the one-year limitations period.
8. Updates to This Policy
We may update this Policy from time to time to reflect changes in the cookies we use or applicable law. Material changes will be communicated by email or by posting a notice on the Sites at least thirty (30) days before they take effect.
9. Contact
Questions about cookies: info@getnxera.com (subject line: "Cookie Question")
Nxera Digital LLC 1201 E Ponce De Leon Blvd Coral Gables, FL 33134
This Cookie Policy was last updated on April 15, 2026. Version 2.0.