Cookie Policy

This policy covers cookies, localStorage, sessionStorage, IndexedDB where used by the browser or wallet, and similar technologies used by the ElyxS web application.

Public blockchain records and wallet provider storage are not cookies controlled by ElyxS, even if they are visible through the browser experience.

ElyxS uses these categories:

• Necessary: always active for wallet sessions, staff sessions, legal checks, security, consent state, and short-lived transaction recovery.
• Preferences: optional storage for interface choices and wallet reconnect convenience.
• Analytics: optional product analytics and self-hosted ElyxS diagnostics through configured tools such as Plausible, PostHog, and the ElyxS error pipeline. They start only after analytics consent is granted.
• Marketing: not used. ElyxS does not use advertising cookies, marketing pixels, social tracking cookies, or ad retargeting in the public beta.

Rejecting non-essential categories does not block wallet connection, legal acceptance, ticket purchases, claims, refunds, or public blockchain reads.

Necessary technologies support core product behavior and cannot be disabled from the cookie preferences panel.

Examples include:

• elyxs_public_session: HttpOnly cookie for the public wallet-auth session used by legal and identity endpoints;
• elyxs_staff_session: HttpOnly cookie for internal operations;
• elyxs_cookie_consent: localStorage record that stores your consent choices;
• claim-ui-storage, claim-status-overrides, and elyxs.pendingParticipations.v1: short-lived records for purchase, claim, and refund recovery;
• temporary request, status, and UI state needed to complete protected actions safely.

Preference storage keeps local interface choices such as language, Hub navigation state, sidebar state, profile tab, and wallet reconnect convenience.

Examples include supra-ui, supra.hub.section, supra.hub.profileTab, sidebar_state, and wallet-storage.

Preference storage is not used for advertising.

Analytics and diagnostics are disabled by default. If you grant analytics consent:

• Plausible and/or PostHog may record selected product events and page views, depending on deployment configuration;
• ElyxS may send sanitized technical error diagnostics to its own API and local Loki service for no more than seven days;
• ElyxS redacts wallet addresses, transaction hashes, signatures, public keys, and similar sensitive identifiers where practical;
• Plausible is loaded through ElyxS consent controls and does not use a static tracking script before consent;
• PostHog automatic capture is disabled;
• PostHog session replay is disabled unless a separate privacy review explicitly approves it.

If you withdraw analytics consent, ElyxS disables analytics capture and clears known analytics browser storage where practical.

Some aggregate or already-sent data may remain in service-provider systems according to their retention settings.

Wallet extensions, browsers, RPC providers, analytics providers, and other third-party tools may maintain their own storage. ElyxS does not control wallet-extension storage or browser-level settings.

You can use your browser settings to delete local data, block cookies, or clear site storage. Blocking necessary storage may break wallet sessions, legal checks, or transaction recovery.

You can change non-essential choices at any time through Cookie preferences or the same link in the page footer.

If the consent model changes materially, ElyxS may show the consent prompt again.

Questions about cookies or privacy can be sent to support@elyxs.com.