Cookie Policy

Cookies are small text files placed on your device when you visit a website. They let a site remember your actions and preferences over time, and help the site's owner understand how the site is used. "Similar technologies" include pixels (also called tags or web beacons), local storage, and software development kits, which work in comparable ways. In this policy we refer to all of them as "cookies".

We use cookies to run the site reliably, to keep it secure, to remember essential state (such as an operator's admin session), and to understand traffic so we can improve the service and measure our marketing. We try to keep this to what is genuinely useful.

• Strictly necessary — required for the site to function and to be secure. This includes the admin session cookie that keeps an operator signed in, and short-lived state needed for the checkout flow. These cannot be switched off through our site because the service would not work without them.
• Functional— remember choices you make to give you a smoother experience, such as keeping a short history of your recent orders in your browser's local storage.
• Analytics & performance — help us understand how visitors use the site, which pages are useful, and where things can be improved, so we can make the service better. This includes two first-party cookies we set ourselves: onexa_vid, which lasts a year and lets us count returning visitors as one person rather than many, and onexa_sid, which expires after 30 minutes of inactivity and groups your page views into a single visit. Both contain nothing but a random identifier — no name, no email, no IP address and no fingerprint — and they are never shared with anyone.
• Advertising & targeting — set by us or our partners to measure and improve advertising, and to attribute visits and conversions. This includes the Meta Pixel (see below).

We use the Meta Pixel, a piece of code provided by Meta (Facebook/Instagram). It sets and reads cookies and identifiers that let us measure the effectiveness of our advertising, understand actions taken on the site, and reach relevant audiences. Data collected through the pixel is shared with Meta and processed under Meta's own terms and data policies. You can adjust how Meta uses your data through your Meta account's ad settings.

Some cookies are set by third parties whose services we use, such as our advertising and analytics partners and, during checkout, our payment provider. These parties are responsible for their own cookies and privacy practices, and we encourage you to review their policies.

Session cookies are deleted when you close your browser. Persistent cookies stay on your device for a set period or until you delete them. The exact lifetime depends on the cookie and, for third-party cookies, on the party that sets it.

• Browser settings — most browsers let you block or delete cookies, and block third-party cookies specifically. Look under Settings → Privacy in Chrome, Firefox, Safari, or Edge.
• Advertising opt-outs — you can opt out of interest-based ads through your Meta ad settings and through industry tools such as the Digital Advertising Alliance and Your Online Choices.
• Local storage— you can clear your browser's site data to remove your on-device order history.

Blocking some cookies may affect how parts of the site work.

Some browsers offer a "Do Not Track" signal. Because there is no common industry standard for how sites should respond, we do not currently respond to these signals, but you can still control cookies using the methods above.

We may update this policy as our use of cookies changes. When we do, we will revise the "last updated" date above.

For how we use the data collected through cookies, see our Privacy Policy. Questions? Email support@onexa.me.