Cookies and browser storage
Last updated:
Convenience translation
A cookie is a small text file a website stores in your browser, which your browser sends back on every later visit. There is also browser storage (localStorage and sessionStorage): entries that stay on your device and are not sent to us on their own.
We only use what the site technically needs. No analytics, no tracking pixels, no ad network, no profiling. Fonts are served from our own server.
Cookies
All cookies are set by citexnode.com itself (first party). They are strictly necessary.
| Name | Purpose | Lifetime | Type / provider |
|---|---|---|---|
cx_at |
Access token of your sign-in. Set when you log in, deleted when you log out. httpOnly, Secure, SameSite=Lax, Path=/. | Until the token expires (a few minutes) | Necessary, citexnode.com |
cx_rt |
Refresh token: keeps you signed in. Set when you log in, deleted when you log out. httpOnly, Secure, SameSite=Lax. | 30 days | Necessary, citexnode.com |
cx_oauth_lang |
Only when you click a sign-in with another service (social login) on the English site: remembers the language for the way back. SameSite=Lax. | 10 minutes | Necessary, citexnode.com |
httpOnly means no script in the browser can read these cookies.
Browser storage
These entries stay on your device. Your browser does not send them to us automatically.
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
cx:cookie-notice |
Remembers that you acknowledged the cookie notice. | Until you delete it | localStorage |
cx:onboarding-done:<user ID> |
Dashboard: the getting-started hint was dismissed. | Until you delete it | localStorage |
cx:admin:drained-nodes, cx-admin-withdrawals-done |
Only in the staff admin area. | Until you delete them | localStorage |
cx.deploy.gitea.return |
Only while you sign in at git.citexnode.com for Deploy: where to return afterwards. Removed once you are back. | Until you return, at most until the tab is closed | sessionStorage |
Services of other providers
We set no cookies for other providers.
- Cloudflare Turnstile (bot protection) is loaded only on the forms for sign-in, registration, forgotten password and contract withdrawal. Data goes to Cloudflare, including to the USA; this is based on the standard contractual clauses under Art. 46 GDPR, and the legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Details are in the privacy policy.
- Stripe and PayPal only come in when you choose to top up your balance: you are redirected to their pages. Any cookies set there are those providers' cookies.
- git.citexnode.com is our own Gitea. If you sign in there for Deploy, it sets its own sign-in cookies on that subdomain.
Legal basis
We need no consent for the cookies and storage entries above: they are strictly necessary to provide the service you have explicitly asked for (Section 25(2) no. 2 TDDDG). The processing behind them is based on Art. 6(1)(b) GDPR (contract, e.g. your account) and Art. 6(1)(f) GDPR (legitimate interest in a working site).
That is why there is no consent banner here, just a notice: there is nothing optional for you to refuse.
Deleting and blocking
- Logging out deletes
cx_atandcx_rt. - At the bottom of this page you can delete this site's local entries.
- In your browser settings you can view, delete or block cookies and stored site data at any time. If you block cookies from citexnode.com, you can no longer sign in; the public pages keep working.
For everything else we process, see the privacy policy.
On this device
The sign-in cookies cx_at and cx_rt are httpOnly: no script on the page can read or delete them. They are removed when you log out.