Cookie Policy

The short version

The public pages of this site set no cookies at all. No analytics, no advertising, no tracking pixels, no session cookie, nothing.

One cookie exists in the whole application, and only staff signing in to the internal area at /admin ever receive it.

The one cookie

Name: apx_admin_session. Purpose: keeps an Apex Path staff member signed in to the internal area after they enter the staff password. It holds a signed token and no personal information. It is set only on successful sign-in, it expires twelve hours later, and signing out removes it immediately.

This is a strictly necessary cookie. The staff area cannot work without it, and it is never set for a visitor to the public site.

Why there is no cookie banner

A consent banner exists to get your agreement before non-essential cookies are set. This site has no non-essential cookies, so a banner would be asking you to consent to nothing. Adding one would be theatre, and it would make the site worse to use.

If that ever changes - if an analytics tool, an advertising pixel or an embedded third-party widget is added - the change has to come with a real consent mechanism that blocks those cookies until you agree, and this page has to be updated at the same time.

Other local storage

The site does not use localStorage, sessionStorage or IndexedDB to hold anything about you. The tracking widget on the home page keeps the number you typed in the page URL so the page can be shared or reloaded; nothing is written to your device.

Third-party content

There are no third-party embeds on this site: no maps, no video players, no chat widgets, no social buttons, no font services. Typefaces are downloaded at build time and served from this domain, so loading a page makes no request to anyone else.

A content security policy is served with every page that blocks scripts, frames, images and network connections from any origin other than this site, so a third-party tracker cannot be added by accident.

Controlling cookies

Every major browser lets you see the cookies a site has set, delete them, and block them. Look under Privacy or Site settings in your browser preferences. Blocking cookies on this domain will not affect the public site in any way.