Cookie Policy
What we store in your browser, why, for how long, and how to change your mind.
Version 1.0 In force since Aug 21, 2026 Updated Aug 21, 2026
This policy explains the cookies used on https://quathos.com and in the Qnexyx application. It is part of our Privacy Policy, and it describes what actually runs in your browser — not what a generic template assumes runs there.
1. What we do not do
It is shorter to start here, because the list of things absent from this product is longer than the list of cookies it sets:
- No advertising cookies, no ad networks, no retargeting pixels, and no conversion tags.
- No third-party analytics script. The pages you are reading load no script from any other host: our typeface is self-hosted precisely so that reading a page does not tell a font CDN who you are.
- No browser fingerprinting, no session replay, no heatmaps, and no cross-site tracking.
- No local storage and no session storage: the application keeps nothing in your browser beyond the cookies listed below.
- We do not sell or share personal information for cross-context behavioural advertising, as those terms are defined by California law. There is nothing to opt out of, because it does not happen.
2. Cookies we set
All five are first-party cookies, set by https://quathos.com itself. None of them is readable by any other website.
| Cookie | Purpose | Category | Lifetime |
|---|---|---|---|
| qnx_session | Keeps you signed in after you log in. Marked HttpOnly, so no script on the page — ours or anyone else’s — can read it. | Essential | 14 days |
| qnx_csrf | Proves that a form submission came from our own pages and not from a site pretending to be you. Without it, being logged in would be enough for another site to act in your name. | Essential | 14 days |
| qnx_consent | Records your cookie choice, the version of this policy you answered, and when. This is the cookie that stops us from asking again — and the record that proves what you chose. | Essential | 180 days |
| qnx_lang | The language you picked in the selector. Written only when you click it. | Preferences | 12 months |
| qnx_theme | Light, dark or system appearance. Written only when you click it. | Preferences | 12 months |
3. The three categories
- Essential — sign-in, CSRF protection and the consent record itself. These are strictly necessary to deliver a service you asked for, so no consent is required for them and the preference panel does not pretend otherwise. Blocking them in your browser means you cannot log in.
- Preferences — language and appearance. They are written only by the act of choosing, which is the consent: the click is the request. Nothing is stored if you never touch the selectors.
- Analytics — measurement of product usage. None is in use today. The category exists, switched off, so that the day we adopt any measurement it is gated behind a choice you already control, instead of appearing first and asking later.
4. Third parties and other domains
Our pages embed no third-party content. Three flows, however, take you to — or are delivered by — someone else, and those parties set their own cookies under their own policies:
- Checkout and billing management run on Stripe pages, on Stripe domains. We never receive your card number, and Stripe’s cookies are governed by Stripe.
- Signing a proposal happens on Qsignyx, a sibling Quathos product, on its own domain and under its own notices.
- Signing in with a Quathos Account takes you to the identity hub, which sets the cookies its own sign-in requires.
5. Your choices
- 1 The banner appears on your first visit and stays until you answer. It does not close by itself, it does not close when you scroll, and there is no hidden dismiss: continuing to browse is not consent here.
- 2 Accepting and refusing are one click each, side by side, with the same weight. Withdrawing later is as easy as giving it: the preference panel on this page is permanent and is linked from every page footer.
- 3 Your browser can block or delete cookies for this site at any time. Essential cookies are the ones you will miss: deleting them signs you out.
- 4 If your browser sends a Global Privacy Control signal, we treat it as a refusal of everything that is not essential, without asking. Honouring that signal is the whole point of it existing.
6. Changes to this policy
A new cookie, a new purpose or a new party means a new version of this policy and a new question: the consent record carries the version you answered, so when it changes materially the banner comes back and your earlier answer is not stretched to cover something you never saw.
7. Questions
Write to [email protected] and a person answers in writing.