Cookie Policy

Effective: 1 June 2026

Key Points Summary

A plain-language overview of our cookie practices:

| Topic | Summary | |---|---| | Cookie categories | We use three categories: Strictly Necessary (always on), Functional (opt-in), and Analytics (opt-in). | | Analytics tracker | Google Analytics 4 (GA4) only — activated only with your consent. | | No advertising cookies | We do not use Google Ads, Facebook Pixel, or any advertising/marketing cookies. | | Consent | We obtain your explicit opt-in consent before setting any non-essential cookies. | | Control | You can change your preferences at any time via our cookie banner or your browser settings. | | Consent records | We store a record of your consent choice for compliance purposes. | | Contact | legal@lexxsoft.com |

1. What Are Cookies

1.1 Definition

A cookie is a small text file that a website places on your device (computer, smartphone, or tablet) through your web browser. Cookies allow the website to remember information about your visit, such as your preferred language and other settings, making your next visit easier and the site more useful to you.

1.2 Types of Cookies

Cookies can be classified in several ways:

By duration:

| Type | Description | |---|---| | Session cookies | Temporary cookies that are deleted when you close your browser. They are essential for the website to function during your visit. | | Persistent cookies | Cookies that remain on your device for a set period or until you delete them manually. They remember your preferences and actions across multiple visits. |

By origin:

| Type | Description | |---|---| | First-party cookies | Set by the website you are visiting (i.e., by Lexx at lexx-trade.com). Only the website that created them can read them. | | Third-party cookies | Set by a domain other than the one you are visiting. Google Analytics 4 sets first-party cookies on our domain that transmit data to Google for analytics processing, and only with your consent. |

1.3 Similar Technologies

In addition to cookies, websites may use similar technologies such as:

Local Storage — data stored in your browser that persists until cleared
Session Storage — data stored temporarily for the duration of a browser session

We use these technologies for the same purposes as cookies and they are covered by this policy.

We organize cookies into three categories. Only strictly necessary cookies are enabled by default. All other cookies require your explicit opt-in consent.

2.1 Strictly Necessary Cookies — Always Active

These cookies are essential for the Service to function. They cannot be disabled without breaking core functionality. They do not require your consent under the ePrivacy Directive (Directive 2002/58/EC), Article 5(3), as they are strictly necessary for the provision of a service explicitly requested by you.

Purpose: Authentication, session management, security (CSRF protection), consent state storage.

| Cookie Name | Provider | Purpose | Duration | Type | |---|---|---|---|---| | __Host-session | lexx-trade.com | Maintains your authenticated session after login | Session | First-party, Session | | __Host-csrf-token | lexx-trade.com | Protects against Cross-Site Request Forgery (CSRF) attacks | Session | First-party, Session | | cookie_consent | lexx-trade.com | Stores your cookie consent preferences (which categories you accepted/rejected) | 1 year | First-party, Persistent | | cookie_consent_date | lexx-trade.com | Records the timestamp of your consent decision for compliance records | 1 year | First-party, Persistent |

2.2 Functional Cookies — Opt-In

These cookies remember your preferences and settings to provide enhanced, personalized features. They are set only after you provide opt-in consent.

Purpose: Language preferences, theme selection, UI settings.

| Cookie Name | Provider | Purpose | Duration | Type | |---|---|---|---|---| | preferred_language | lexx-trade.com | Remembers your selected language (e.g., EN, RU) across visits | 1 year | First-party, Persistent | | color_theme | lexx-trade.com | Remembers your selected theme (dark/light mode) | 1 year | First-party, Persistent | | sidebar_state | lexx-trade.com | Remembers whether the sidebar/navigation is expanded or collapsed | 1 year | First-party, Persistent |

Without functional cookies: If you decline functional cookies, the Service will still work, but your preferences (language, theme) will not be remembered between visits and will default to the system/browser defaults.

2.3 Analytics Cookies — Opt-In

These cookies help us understand how visitors interact with the Service by collecting anonymous, aggregated information. They are set only after you provide opt-in consent.

Purpose: Website traffic analysis, usage patterns, service improvement.

| Cookie Name | Provider | Purpose | Duration | Type | |---|---|---|---|---| | _ga | Google (set on lexx-trade.com domain) | Distinguishes unique users by assigning a randomly generated ID. Used to calculate visitor, session, and campaign data for analytics reports. | 2 years | First-party, Persistent | | _ga_<MEASUREMENT_ID> | Google (set on lexx-trade.com domain) | Maintains session state for the specific GA4 property. | 2 years | First-party, Persistent |

Note: GA4 analytics cookies use IP anonymization by default. We have disabled all advertising features, Google Signals, and data sharing for advertising within our GA4 configuration. GA4 data retention is set to 14 months.

When you first visit the Service, you will see a cookie consent banner that allows you to:

Accept all optional cookies (functional + analytics)
Reject all optional cookies (only strictly necessary cookies remain active)
Customize your choices by selecting individual cookie categories

3.2 Granular Control

You can change your consent at any time by:

Clicking the cookie settings icon (available in the website footer)
Clearing cookies from your browser and revisiting the site, which will trigger the consent banner again
Contacting us at legal@lexxsoft.com

We follow a consent-first approach: no optional cookies (functional or analytics) are set on your device until you make an affirmative choice to enable them. This complies with:

GDPR Article 6(1)(a) — consent as a legal basis
ePrivacy Directive Article 5(3) — prior consent for non-essential cookies
CJEU Case C-673/17 (Planet49) — opt-in consent required, pre-ticked boxes do not constitute valid consent

To comply with GDPR Article 7(1), which requires us to demonstrate that you consented, we store the following consent information:

| Data Point | Details | |---|---| | Consent status | Which cookie categories you accepted or rejected | | Timestamp | Date and time of your consent decision | | Version | The version of our cookie notice at the time of consent | | Method | How consent was given (e.g., consent banner interaction) |

This consent data is:

Stored in a first-party cookie (cookie_consent) on your device
Stored server-side in our secure database for compliance audit purposes
Retained for 3 years from the date of consent
Not used for any other purpose

5. How to Control Cookies via Browser Settings

You can control and delete cookies through your browser settings. Here are instructions for major browsers:

5.1 Google Chrome

Click the three-dot menu — Settings
Navigate to Privacy and security → Cookies and other site data
Choose your preferred setting:
- Block third-party cookies
- Block all cookies
- Clear cookies on browser close
To delete existing cookies: Privacy and security → Clear browsing data → Select Cookies and other site data → Clear data

Chrome cookie documentation

5.2 Mozilla Firefox

Click the menu button — Settings
Navigate to Privacy & Security
Under Enhanced Tracking Protection, choose Strict, Standard, or Custom
To delete cookies: Privacy & Security → Cookies and Site Data → Clear Data

Firefox cookie documentation

5.3 Safari (macOS / iOS)

macOS:

Open Safari → Settings (or Preferences)
Click the Privacy tab
Manage cookie settings under Cookies and website data
Click Manage Website Data to view and remove specific cookies

iOS:

Go to Settings → Safari
Scroll to Privacy & Security
Toggle Block All Cookies as desired
Tap Clear History and Website Data to remove cookies

Safari cookie documentation

5.4 Microsoft Edge

Click the three-dot menu — Settings
Navigate to Cookies and site permissions → Manage and delete cookies and site data
Choose your preferred blocking level
To delete cookies: Privacy, search, and services → Clear browsing data → Select Cookies and other site data → Clear now

Edge cookie documentation

Important: Blocking or deleting all cookies may prevent certain features of the Service from functioning properly. Strictly necessary cookies are required for authentication, session management, and security.

6. Third-Party Cookies — Google Analytics 4

6.1 About Google Analytics 4

Our only third-party cookie provider is Google Analytics 4 ("GA4"), operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

GA4 uses cookies to:

Distinguish unique visitors (without identifying them personally)
Track session length and page views
Understand user navigation patterns
Measure Service engagement

6.2 Privacy Safeguards

We have configured GA4 with the following privacy protections:

| Setting | Configuration | |---|---| | IP anonymization | Enabled (default in GA4) | | Advertising features | Disabled | | Google Signals | Disabled | | Data sharing for ads | Disabled | | Data retention period | 14 months | | Consent gating | GA4 scripts are blocked until the user provides consent via our cookie banner. No analytics data is collected until consent is granted. |

6.3 Google's Data Practices

For information about how Google processes analytics data:

6.4 Opt-Out of Google Analytics

In addition to managing cookies through our consent banner, you can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

7. Cookies We Do NOT Use

For full transparency, we want to clarify that we do not use any of the following:

| Category | Examples | Status | |---|---|---| | Advertising / Marketing cookies | Google Ads (_gcl_*), Facebook Pixel (_fbp, _fbc), retargeting cookies | Not used | | Social media tracking pixels | Facebook, Twitter/X, LinkedIn pixels | Not used | | Cross-site tracking | Advertising networks, data brokers | Not used | | Fingerprinting technologies | Canvas fingerprinting, WebGL fingerprinting | Not used |

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, our technology, or legal requirements.

When we make changes:

We will update the "Last Updated" date at the top of this policy
For material changes (e.g., adding new cookie categories or third-party providers), we will re-prompt you for consent
Previous versions are available upon request at legal@lexxsoft.com

This Cookie Policy should be read alongside:

Privacy Policy — Full details on how we collect, use, and protect your personal data
Terms and Conditions — The terms governing your use of the Service
Refund & Cancellation Policy — Subscription cancellation and refund terms
Legal Disclosures — Regulatory and compliance disclosures
Acceptable Use Policy — Permitted use of the Service
Data Processing Agreement — GDPR Article 28 data processing terms

10. Contact Us

If you have questions about this Cookie Policy or wish to exercise any of your data protection rights, contact us:

| Channel | Details | |---|---| | Legal & Privacy | legal@lexxsoft.com | | Support | support@lexxsoft.com | | General | office@lexxsoft.com | | Postal Address | Data Protection Contact, Lexx Software Co. Ltd., Office 2, Room 2, Blue Angel, Triq Belvedere, Gzira, GZR 1112, Malta |

Supervisory Authority

You may also contact our lead supervisory authority:

Information and Data Protection Commissioner (IDPC) Level 2, Airways House, High Street, Sliema SLM 1549, Malta Phone: +356 2328 7100 Email: idpc.info@idpc.org.mt Website: https://idpc.org.mt