Cookie Policy

1. Cookies and similar storage

Cookies are small values a website stores in your browser and receives with later requests. Local storage and session storage hold information in your browser for site features. A progressive web app (PWA) can also use a service worker, cache storage, and device notification permissions.

This policy covers NexusAH at nexusah.com and its PWA at app.nexusah.com. Read the Privacy Policy for the use of personal information beyond browser storage.

2. Current use

• Sign-in and security: maintaining your requested login, protecting the sign-in flow, and connecting authenticated requests to the correct account.
• Interface preferences: remembering sidebar, region, filter, and category-display choices.
• Support: keeping an assistant conversation available while you move between pages within a browser tab.
• PWA and notifications: loading the app, remembering an installation, and delivering push notifications after permission is granted.

These purposes are distinct from advertising tracking. Storage needed for a requested service may be exempt from consent requirements; calling something a preference does not automatically make it legally exempt. Browser permissions, where used, are separate from advertising consent.

We also record first-party page usage and performance information on our servers, including account or session references when available. That processing is described in the Privacy Policy; it is not anonymous merely because it does not use a separate analytics cookie.

3. Storage inventory

The following identifies the main storage used by the current service. Entries depend on which features you use. Browser settings may shorten their lifetime, and first-party storage belongs to the site or app origin that creates it.

nexus_session — NexusAH sign-in cookie

First-party cookie for your authenticated session and sign-in security state. The configured persistent lifetime is 90 days and may be refreshed during use. Signing out clears the relevant login cookie. It is sent over HTTPS and is not readable by page JavaScript. The site may also issue deletion instructions for an older cookie named session.

ahSidebarCollapsed, aplexo_token_regions_v2, nxaBrowseFiltersOpen, aplexo_nx_cat_collapse, and last-region preference keys

First-party local storage for sidebar layout, displayed token regions, filter visibility, category expansion, and the last region selected when adding an item. These preferences have no fixed automatic expiry; they remain until replaced, removed by the service, or cleared through your browser.

nexusAssistantOpenV1 and nexusAssistantChatStateV1

First-party session storage for the assistant panel and recent conversation. It normally lasts for the tab's session, subject to browser restoration behavior. The current assistant discards expired conversation state after approximately ten minutes of inactivity when its code runs. “End chat” clears the local conversation state; it is not a deletion request to an external provider.

nx_consent — your cookie choices

First-party cookie that remembers which optional cookie categories you allowed and when you chose, so the cookie banner does not ask again. It lasts 12 months and is not readable by page JavaScript. If you are signed in, your choice is also saved to your account so it applies on your other devices.

PWA cache, installation identifier, and push subscription

First-party app storage and browser-managed notification data support app loading and push delivery. Cache entries may be replaced during app updates or removed by your browser. Installation and push data can persist until cleared, revoked, or removed; there is no single fixed cookie lifetime. Manage notifications in the app and your device or browser settings.

The aplexo prefix on some internal storage names is a legacy technical name used by NexusAH, not a separate advertising provider.

4. Third-party connections

NexusAH serves its own fonts and page scripts, so pages do not contact Google Fonts or other font or script services. Cloudflare provides network delivery and security. A connection can disclose an IP address, browser information, and referrer information even when it does not set a cookie.

On the dashboard, notifications, and Browse pages, hovering an item for the first time loads Wowhead's item-tooltip script from zamimg.com, and hovering items requests tooltip data and images from Wowhead. The script does not set NexusAH cookies or storage; Wowhead's own privacy policy applies to its handling of those requests.

Cloudflare may use security cookies when a challenge or other security feature is invoked. Which cookies appear depends on the feature and request; see Cloudflare's cookie documentation. Discord or Google sign-in takes you to those providers, whose own storage and privacy policies also apply there.

The legal pages themselves do not load advertising, custom web fonts, or the support assistant. Network-level delivery and security processing still applies.

5. Planned advertising

We plan to support free access with advertising, primarily through Google publisher advertising services such as AdSense, and to offer an optional ad-free support subscription. These are planned services, not a statement that advertising cookies or paid checkout are currently active.

Before enabling advertising, we will update the provider and storage disclosures, ask for your choice again through Manage cookies, and add any other consent or opt-out controls required for the relevant processing. Where consent is required, optional advertising or analytics storage must not be enabled before that choice. Personalized Google publisher ads for the EEA, UK, and Switzerland require an appropriate Google-certified consent manager. Google's standard non-personalized ads can still use cookies; “non-personalized” does not mean “cookie-free.”

Accepting the Terms, signing in, or continuing to browse is not consent to optional tracking. An ad-free subscription is not a requirement for exercising privacy rights. See how Google uses information from partner sites for background, not as a substitute for NexusAH's future notice and controls.

6. Your choices today

• Manage cookies: choose whether to allow optional analytics and advertising cookies. Necessary cookies are always on. Use the Manage cookies link on every page, or Settings → Cookies when you are signed in. You can change your choice at any time; neither optional category is in use yet.
• Cookies and local storage: your browser's site-data settings let you inspect, block, or clear storage for NexusAH. Blocking the login cookie can prevent sign-in. Clearing preferences resets interface choices.
• Push notifications: use the app's notification controls and your browser or device permissions. Revoking push permission does not automatically stop email or Discord delivery; manage those channels separately in Settings.
• Support chat: use “End chat” to clear the local conversation or contact the team by email instead of using the assistant.
• Privacy requests: follow the privacy request instructions. Clearing browser storage does not delete server-side account information.

Your browser and installed PWA may maintain separate storage. Check both nexusah.com and app.nexusah.com when clearing data or changing permissions.

Global Privacy Control (GPC) and Do Not Track: these are different browser signals. NexusAH does not currently have automated GPC processing or a Do Not Track preference workflow. Google advertising is not currently enabled. Before introducing processing that requires a universal opt-out, we must implement recognition of applicable signals and describe its scope here; browser settings or email alone are not a replacement for that requirement.

7. Updates and contact

We will update this page as storage, providers, and available controls change. For questions, email [email protected]. Operator information is explained in the Privacy Policy.