Cookie Policy
Version 1.0-RC2 · Effective date: 12 novembre 2026
This document is available in English, German, French and Turkish. The English version is shown.
Draft — company registration details are being completed. This document is not yet final.
The current verified version of Govexa does not use analytics, advertising or session-recording cookies. The technologies below are used to run the service or to store a preference the user requested.
Govexa platform (app.govexa.io)
Strictly necessary cookies
| Cookie | Purpose | Retention | Attributes |
|---|---|---|---|
govexa_session | Maintaining the user session (JWT) | JWT lifetime; 1 day by default | httpOnly, SameSite=Lax, Secure in production |
govexa_pending_session | Temporary session during two-step verification | 10 minutes | httpOnly, SameSite=Lax, Secure in production |
govexa_platform_admin_session | Platform administrator session | JWT lifetime | httpOnly |
govexa_pending_platform_admin_session | Platform administrator two-step verification interim session | 10 minutes | httpOnly |
govexa_oauth_return | Address to return to after sign-in when connecting an AI app (MCP) | Session; deleted after sign-in | httpOnly |
Preference cookies
| Cookie | Purpose | Retention | Attributes |
|---|---|---|---|
govexa_locale | Language preference | 1 year | Readable by the client |
govexa_tz | Showing dates and times in your browser's time zone | 1 year | Readable by the client |
govexa_management_system | Selected management system filter | 1 year | httpOnly |
Browser local storage
| Key | Purpose | Retention |
|---|---|---|
govexa.dashboard.pinnedNavHrefs | Pinned menu items | Until the user/browser clears it |
govexa.navRegroupNoticeSeen.v1 | Whether the menu-layout notice was seen | Until the user/browser clears it |
Website (govexa.io)
The website does not set first-party cookies for advertising or cross-site tracking. Page views are measured in aggregate with a cookie-free analytics service that does not track individual visitors or store personal identifiers. Cloudflare Turnstile runs on form submissions for bot protection and may set a technical cookie on its own domain used only to tell human visitors apart from bots. See the website-specific information in the Privacy Policy for details.
If analytics, advertising or other non-essential technologies are added in the future, this policy and, where required, consent management are updated beforehand.