Zero Third-Party Advertising Pledge
ApexPay respects digital sovereignty. We do not use cross-site behavioral tracking cookies, commercial ad-network pixels (e.g. Meta, Google Marketing Platform, TikTok), or commercial data-broker fingerprinting tools. We only deploy strictly essential operational cookies and user-selected UI state persistence.
1 Categories of Local Storage & Cookies Deployed
When you interact with the ApexPay platform, we store minimal essential state on your device categorized as follows:
| Token Name | Category | Purpose | Duration |
|---|---|---|---|
| __Host-apx_csrf | Strictly Essential | Protects against Cross-Site Request Forgery in token dispatch | Session |
| apex_user_email | Functional (Local) | Caches verified waitlist token status in localStorage for instant retrieval | 30 Days |
| apx_currency_pref | Preference | Persists chosen dashboard balance view (USD, EUR, GBP) | 1 Year |
| _cfuvid / __cf_bm | Security & DDoS | Cloudflare edge rate limiting and automated bot defense | 30 Minutes |
2 Strictly Necessary vs. Optional Telemetry
Under the EU ePrivacy Directive (Directive 2002/58/EC) and UK Privacy and Electronic Communications Regulations (PECR), strictly necessary cookies (such as security tokens and session state) do not require prior consent because the platform cannot safely operate without them.
For non-essential performance diagnostics, we utilize self-hosted, privacy-first analytics with fully anonymized IP masks and zero cross-domain tracking.
3 Global Privacy Control (GPC) & Do Not Track (DNT) Signals
ApexPay automatically honors the Global Privacy Control (GPC) standard and browser Do Not Track header signals. When your browser transmits an enabled GPC signal (Sec-GPC: 1), our web servers automatically suppress all optional telemetry scripts without requiring any manual preference adjustments.
4 Managing Your Browser Storage Settings
You can inspect, block, or delete cookies at any time via your browser's native settings. Note that disabling strictly necessary security cookies will impair the ability to securely generate authentication tokens and access cards.
- Google Chrome: Settings > Privacy and security > Third-party cookies.
- Apple Safari: Settings > Safari > Advanced > Privacy & Cookies.
- Mozilla Firefox: Settings > Privacy & Security > Enhanced Tracking Protection.
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies.
5 Contact Privacy Engineering
If you have questions regarding our cookie architecture or wish to request data verification under GDPR Article 15: