N3X
N3X Privacy

Cookies and browser storage

What N3X stores on a device, why it is needed, and why the site does not display an “accept all” banner.

Version 1.3 · effective:

In short: n3x.pl does not use advertising cookies, remarketing or cross-site tracking. Vercel Web Analytics works without cookies and provides aggregate statistics. A functional cookie stores only the selected language, while session cookies are created after an administrator signs in. Tool preferences remain in the browser.

1. Essential cookies

The NEXT_LOCALE cookie remembers a manually selected language for up to 12 months. If it is absent, the site selects a language from browser preferences. The cookie contains no user identifier and is not used for analytics or advertising.

Supabase Auth stores session cookies only for people signing in to the administration panel. They provide authentication, session refresh and access protection. Sign-in cannot work without them. Ordinary tool and product-page visitors do not receive these cookies.

After an administrator verifies with a WebAuthn/FIDO2 security key (such as YubiKey), the technical n3x_admin_mfa cookie is set for up to 12 hours. It contains only a random session identifier and is HttpOnly, Secure in production and SameSite=Strict. It contains no biometric data or key secret; the WebAuthn public key remains in the protected server database.

An interface component may store the technical sidebar_state cookie for up to 7 days when a collapsible sidebar is used. It remembers only whether the interface is open.

2. LocalStorage and sessionStorage

The following information is stored only in connection with a function selected by the user and is not automatically sent to N3X:

  • dismissal of a PWA or application banner — until the session ends or browser storage is cleared;
  • saved colour-picker values — until removed by the user or site data is cleared;
  • local prices and links in PC Builder Pro and prices in the Hikvision configurator — until settings are reset or site data is cleared;
  • a draft N3XRemote deployment configuration — locally, until overwritten or site data is cleared.

Do not enter production passwords or keys in these fields if you do not want them stored in the browser profile. Move generated deployment secrets to the destination secure store.

3. Cookieless analytics

N3X uses Vercel Web Analytics. It sets no third-party cookies, does not expose a raw IP address to N3X and provides aggregate page views, country, device type, operating system, browser and referrer. Its visitor session identifier is automatically discarded after 24 hours.

Before an event is sent, N3X removes query parameters and URL fragments and replaces shared-quote and short-link identifiers with generic [id] and [code] labels. Form contents, AI conversations, searched domains, email addresses and tool inputs are not sent to analytics.

N3X also maintains aggregate counters for actual function runs, download clicks, Docker actions and opens of hosting information. The server uses the Vercel country header only to increment the relevant day-and-country counter. The mechanism neither reads nor writes cookies, localStorage or another device identifier and stores neither IP addresses nor individual events.

4. Direct external connections

Some functions require a direct connection to a selected provider, but not for advertising: the speed test uses ipapi.co and Cloudflare, the coverage map loads OpenStreetMap tiles, and a download or update connects to GitHub. The provider sees ordinary connection metadata including the public IP and applies its own terms. Starting the test, map or download is a separate function selected by the user.

5. Why there is no consent banner

N3X does not activate optional analytics or marketing cookies. Device storage is used for technically necessary or explicitly requested functions such as sign-in, remembering a dismissed notice or saving draft tool settings. A precise notice is therefore more appropriate than a banner suggesting advertising tracking.

If a future technology requires prior consent, it will not be activated before a choice is made, and the site will provide preferences that make refusal and withdrawal as easy as acceptance.

6. How to remove local data

Use a tool's reset function or the browser's site-data, cookies and local-storage controls for n3x.pl. Removing NEXT_LOCALE enables automatic browser-language selection again, while removing administrator cookies signs the user out. Blocking local storage may disable saved settings, but core site content should remain available.

7. Contact

Send questions about cookies and device storage to studio@n3x.pl. More information about personal data is available in the Privacy Policy.