Nothing is set while you read these pages. Four things are kept in your browser once you have an account, and all four are listed below.
A cookie is a small file a site asks your browser to keep and hand back on the next request. Local storage does the same job by a different route: the browser keeps it, but it is scripts on the page that read and write it rather than the server. The law treats the two the same, so this page covers both.
You have not been asked to accept anything because there is nothing here to accept. These pages set no cookies, run no analytics and carry no advertising or tracking scripts. What is kept in your browser is either something you chose — your light or dark preference — or something the service cannot work without once you are signed in. Neither of those needs consent, and asking for it anyway would be theatre.
No cookie is set. One thing is read: your light-or-dark preference, so the marketing pages and the application agree on which one you are in. If you have never set it, nothing is found and your operating system decides.
This is the point where something is written. On the signup page, once your CRM has been created:
The session cookie is marked httpOnly, which means no script on any
page can read it — only the server it is sent to.
The whole list, with nothing left out:
| Name | Kind | What it is for | How long |
|---|---|---|---|
ga_theme |
Local storage | Whether you chose light or dark. Written by the application when you pick one; every page here reads it so the two halves never disagree. | Until you clear your browser |
| Session cookie | Cookie | Keeps you signed in. Set by our server when your CRM is created, on the parent domain so it reaches the application. httpOnly. |
Until you sign out or it expires |
ga_user |
Local storage | Who you are signed in as, so the interface can greet you and show your own records without asking the server first. | Until you sign out |
ga_permissions |
Local storage | What your account is allowed to reach, so buttons you cannot use are not drawn. The server checks again on every request — this copy only decides what is shown. | Until you sign out |
None of it is used to follow you, to build a profile, or to tell anyone else what you have looked at.
The site loads its typefaces from Google's font servers and some illustrative profile photographs from a third-party avatar service. Neither sets a cookie here, but both receive your IP address when a page loads, as they would for any site that loads a file from them.
Every browser can show you what a site has stored and delete it, usually under privacy or site settings, and you can block cookies for a site entirely. Nothing on these pages breaks if you do — the worst that happens is that the theme falls back to whatever your operating system says. Blocking the session cookie is different: the application has no other way to tell who you are, so you would not be able to stay signed in.
If we start using something that is not on the list above, it goes on the list before it goes into the product, and the date at the top of this page changes with it.
What we collect and why is set out in the privacy policy; what you are agreeing to by using Nexora is in the terms of service.
Join thousands of businesses using NexoraCRM to manage leads, close deals, and grow faster.