Feature ReleaseAutomated WhatsApp Lead Captures & AI Bots Are Now Live — Discover Capabilities →
Tracking Transparency

Cookie Policy

Every cookie we set, what it does, how long it lives, and how to turn off the ones that are not essential.

Effective: August 7, 2026 Version: 1.0

1. WHAT COOKIES ARE

1.1. A cookie is a small text file placed on your device by a website. It lets the site recognise your browser on a later request — which is how you stay logged in rather than having to re-authenticate on every page.

1.2. This policy also covers technologies that behave like cookies: localStorage and sessionStorage (key-value storage in your browser), and pixels (tiny images that record that a page or email was opened).

1.3. This policy supplements our Privacy Policy, which explains the wider picture of what personal data we hold and why. Where the two overlap, read them together.

2. COOKIES WE SET

2.1. UrbanXPixels runs a deliberately small cookie footprint. We do not set advertising or cross-site tracking cookies on this website.

CookieCategoryPurposeDurationParty
uxp_sessionStrictly necessaryHolds your signed login session (a JWT) so you stay authenticated between page loads. Without it you cannot sign in or use the client dashboard. This cookie is HttpOnly, marked Secure in production, and SameSite=Lax.7 days, or until you log outFirst party
sidebar_stateFunctionalRemembers whether you collapsed or expanded the dashboard sidebar so it stays as you left it on the next page load.7 daysFirst party

2.2. Strictly necessary cookies are set without asking for consent, because the service cannot function without them. We rely on GDPR Art. 6(1)(b) (performance of a contract) where that regulation applies. You cannot switch these off and still log in.

2.3. Browser storage. Beyond cookies, the dashboard stores the following keys on your device. They hold interface state only — no authentication tokens and no personal data are written to browser storage.

  • userlocalStorage
  • uxp_flow_data_<flow id>localStorage
  • uxp_popup_dismissedsessionStorage

Clearing site data in your browser removes all three. sessionStorage entries clear automatically when you close the tab.

3. CATEGORIES EXPLAINED

3.1. Strictly necessary. Required for authentication, security, load balancing, and preventing fraudulent form submission. Exempt from prior consent.

3.2. Functional. Remember preferences such as language or a dismissed banner. We ask before setting these where they are not essential.

3.3. Analytics. Aggregate, non-identifying measurement of which pages are visited and where visitors drop off. If and when we enable analytics, it will be listed in the table above and gated behind your consent.

3.4. Advertising. Used to build a profile for targeted advertising. We do not use advertising cookies on this website and do not sell or share cookie data with ad networks.

4. THIRD-PARTY AND EMBEDDED CONTENT

4.1. Some pages embed third-party content — for example a video player, a map, or a payment form. Those providers may set their own cookies once the embedded content loads, under their own policies, which we do not control.

4.2. Payment pages are hosted by the payment provider. When you are redirected to complete a payment, that provider's cookie policy governs.

4.3. The client dashboard's WhatsApp features communicate with Meta's Business API from our servers, not from your browser, so Meta does not set cookies on your device through that integration.

5. HOW TO CONTROL COOKIES

5.1. Browser controls. Every major browser lets you view, block, and delete cookies from its settings — under Privacy in Chrome, Edge, Firefox, and Safari. You can also browse in a private or incognito window, which clears cookies when the window closes.

5.2. Do Not Track. We do not run cross-site tracking, so there is nothing for a Do Not Track header to disable. We honour it by default in the sense that the behaviour it targets does not occur here.

5.3. Blocking strictly necessary cookies will log you out and prevent you from signing back in. The dashboard cannot maintain a session without them — this is a technical limit, not a choice.

5.4. Withdrawing consent. Where we have asked for consent to a non-essential cookie, you may withdraw it at any time by clearing cookies for this site or by writing to privacy@urbanxpixels.com. Withdrawal does not affect processing that already took place.

6. CHANGES AND CONTACT

6.1. When we add or remove a cookie, we update the table in Section 2 and the version stamp at the top of this page. Material changes are announced by email to account holders at least 14 days in advance.

6.2. Questions about cookies or any other tracking technology: privacy@urbanxpixels.com.

6.3. Unresolved concerns may be escalated to our Grievance Officer at grievances@urbanxpixels.com.