Legal
Cookie Policy
Status: own-copy, published.
Last updated: 11 August 2026
Noxlyt Systems prosta spółka akcyjna (Noxlyt Systems P.S.A.), ul. Chęcińska 26B/44, 25-020 Kielce, Poland · KRS 0001245297 (Sąd Rejonowy w Kielcach, X Wydział Gospodarczy KRS) · NIP 9592093594 · REGON 544903117 · share capital 1 000,00 PLN ("Noxlyt", "we", "us") explains here which cookies and similar technologies are used on our public websitenoxlyt.com and our application noxlyt.app, and why we do not show a cookie consent banner.
1. What this policy covers
A "cookie" is a small text file a website asks your browser to store. Similar technologies include localStorage, sessionStorage, and other terminal-equipment storage. This policy covers cookies and equivalent storage set by:
- noxlyt.com — our public marketing and information site, and
- noxlyt.app — the Noxlyt application (available to invited client users).
It does not cover third-party sites we link to; those have their own policies.
2. Our approach: strictly-necessary only — no banner
We deliberately keep cookie use minimal. We set only strictly-necessary cookies and use cookieless analytics. We do not set advertising, marketing, cross-site tracking, or non-essential analytics cookies.
Under the ePrivacy rules and Polish Prawo telekomunikacyjne (art. 173), consent is not required for storage that is strictly necessary to deliver a service the user has asked for. Because every item below is either strictly necessary or not a cookie at all, a "reject all" control would have nothing real to switch off:
- if such a control still loaded our anti-bot protection it would mislead you, and
- if it suppressed that protection it would break or expose our contact form.
So instead of a misleading consent gate we publish this policy and a short cookie notice. If we ever introduce a non-essential cookie, we will add a proper consent mechanismbefore that cookie is set, and update this policy.
3. Cookies and storage we use
| Where | What | Category | Purpose | Consent |
|---|---|---|---|---|
| noxlyt.com | Cloudflare Turnstile — no cookie; a single-use token returned with the form | Strictly necessary (security) | Anti-bot protection for the contact form; loaded only on our home page, where that form is | Exempt |
| noxlyt.app | __Host-noxlyt.session_token | Strictly necessary | Keeps you signed in; httpOnly, secure, host-only session cookie | Exempt |
| noxlyt.com | Cloudflare Web Analytics | Not a cookie — cookieless | Aggregate, anonymised traffic metrics | Not applicable |
Notes:
- Turnstile is Cloudflare's privacy-preserving, CAPTCHA-free bot-protection control. It loads only on our home page, where our contact form is, and it sets no cookieon noxlyt.com: solving the widget returns a single-use token, which our contact-form handler verifies server-side. Cloudflare issues its challenge-clearance cookie (
cf_clearance) only where challenge pre-clearance is enabled. Cloudflare describes what Turnstile collects in itsTurnstile Privacy Addendum. - Session cookie is set only after you sign in to noxlyt.app and is required for the application to function. Signing out clears it.
- Cloudflare Web Analytics does not use cookies or other client-side state for analytics, and does not track individuals over time. It is therefore not a cookie and does not trigger a consent requirement. We list it here for transparency and in oursub-processors and Privacy Policy.
4. Categories (for forward compatibility)
- Strictly necessary — required for the site/app to work or to keep it secure (the session cookie above, and the cookieless Turnstile anti-bot check that protects our contact form). Always active; exempt from consent.
- Analytics — currently satisfied by a cookieless tool only. If we ever add a cookie-based or otherwise non-essential analytics technology, it will be placed in this category behind a consent control.
5. How to control cookies
You can view, manage, and delete cookies through your browser settings, and you can set most browsers to refuse cookies. Note that blocking the session cookie above will prevent the signed-in application from working, and blocking scripts or storage for Cloudflare's anti-bot check will stop our contact form from being submitted. For general, browser-independent guidance see an external reference such asaboutcookies.org.
6. Changes to this policy
We may update this Cookie Policy if our cookie use changes — for example, if we introduce a new technology. Material changes will be reflected in the Last updated date above and, where a non-essential cookie is introduced, accompanied by an appropriate consent mechanism.
7. Contact
Questions about this policy or our cookie use: privacy@noxlyt.com.
See also our Privacy Policy and sub-processor list.