Legal · Cookies Policy
CNEX-Flow Cookies Policy
What This Policy Covers
This Cookies Policy explains how CNEX-Flow uses cookies and similar tracking technologies on the marketing website at https://cnexflow.com and within the CNEX-Flow platform. It expands on §10 of our Privacy Policy.
We use the minimum cookies needed to make the site work, plus optional analytics and advertising cookies that only run if you choose to allow them.
1. What Are Cookies
Cookies are small text files placed by your browser when you visit a website. They allow the site to remember information about you across pages and sessions — like your preferences, whether you're logged in, or whether you've already seen a consent banner.
Some "cookies" technically use other browser storage mechanisms — `localStorage`, `sessionStorage`, or pixel-tracking requests. For simplicity, we use the word "cookies" throughout this policy to cover all of these technologies.
2. Categories of Cookies We Use
2.1 Essential — Always On
These cookies are required for the site to function. They cannot be disabled.
| Cookie / Storage | Set by | Purpose | Lifetime |
|---|---|---|---|
| `cnex-theme` | CNEX | Remembers your dark / light theme preference for server-side rendering | 1 year |
| `cnex-analytics-consent` | CNEX | Remembers whether you granted or denied analytics consent | 1 year |
| `localStorage: auth tokens` | CNEX (platform only) | Keeps you logged in to the CNEX-Flow platform | Session |
2.2 First-Party Analytics — On by Default
We use privacy-friendly first-party analytics to understand which pages and sections of the site are working. No third-party cookies are set by these tools. Aggregate, anonymized data only — we cannot identify individual visitors from it.
| Tool | Cookies set | Purpose | Lifetime |
|---|---|---|---|
| Plausible Analytics | None (cookieless) | Aggregate page-view and outbound-link tracking | n/a |
These run regardless of your consent choice because they do not collect personal data and rely on no third-party cookies. This is permitted under the New Zealand Privacy Act, Australian Privacy Act, and is recognised as low-risk processing under GDPR.
2.3 Third-Party Analytics & Advertising — Require Consent
These cookies are loaded only if you click "Allow all" in our consent banner. They help us:
- Measure the performance of our marketing campaigns
- Attribute trial signups to the channels that drove them
- Show relevant ads to teams who might benefit from CNEX-Flow
| Provider | Cookies set | Purpose | Lifetime |
|---|---|---|---|
| Google Analytics 4 | `_ga`, `_gid`, `_gat_` | Funnel analysis, conversion attribution | 2 years (`_ga`); 24 hours (`_gid`); 1 minute (`_gat_`) |
| Meta Pixel | `_fbp`, `fr` | Facebook / Instagram ad attribution + retargeting | 90 days |
| LinkedIn Insight Tag | `bcookie`, `lidc`, `_li_` | LinkedIn ad attribution + retargeting | 1 year (`bcookie`); 24 hours (`lidc`) |
| TikTok Pixel | `_ttp`, `tt_appInfo` | TikTok ad attribution | 13 months |
If you decline consent (click "Essentials only"), none of these cookies are set and the corresponding tracking scripts are never loaded. You can verify this in your browser's developer tools (Application → Cookies / Storage).
3. Your Choices
3.1 The Consent Banner
On your first visit to the marketing website, a banner appears at the bottom of the page with two equal-weight choices:
- Essentials only — only essential and first-party analytics cookies are set
- Allow all — third-party analytics + advertising cookies are also activated
Your decision is remembered for 12 months. After that (or if you clear cookies), the banner will appear again.
3.2 Changing Your Mind Later
- To opt back in: clear the `cnex-analytics-consent` cookie in your browser settings — the banner will reappear on your next visit.
- To opt out: same — clear the cookie, then click "Essentials only" when the banner reappears.
A dedicated "Cookie preferences" link in the footer that lets you re-open the banner without clearing cookies is planned. Until that ships, the cookie-clearing approach achieves the same result.
3.3 Browser Controls
All modern browsers let you block or delete cookies through their settings:
Blocking all cookies may break essential functionality on the platform (e.g., staying logged in, remembering your theme).
3.4 Global Privacy Control (GPC)
If your browser sends a Global Privacy Control signal, we treat it as a "deny" decision automatically — you do not need to interact with the consent banner.
3.5 Do Not Track (DNT)
"Do Not Track" is a deprecated browser signal that most analytics and ad platforms no longer act on. We do not specifically honor DNT. Use the consent banner or GPC instead.
4. Cookies Within the Platform
The CNEX-Flow platform itself (portal.cnexflow.com) uses only essential cookies and `localStorage` entries needed to keep you logged in and remember your in-platform preferences. No third-party advertising cookies are loaded inside the authenticated platform — this policy's §2.3 applies only to the marketing website.
See Privacy Policy §10 for the full breakdown.
5. Sharing Data With Third Parties
When you accept third-party cookies, the relevant provider (Google, Meta, LinkedIn, TikTok) receives information about your interaction with the marketing site. Each provider's own privacy policy governs what they do with that data:
We do not sell your data. We do not allow third-party advertising networks beyond the four pixels listed in §2.3.
6. Changes to This Policy
We may update this Cookies Policy as we add or remove tools, or as the law changes. When we do:
- The "Last Updated" date at the top of this page is bumped
- For material changes, the consent banner's copy may update so you can re-make an informed choice
- Active customers will be notified in-platform
7. Contact
For questions about how we use cookies or how to control them:
IDL Creations Limited (trading as CNEX)
- Email: admin@cnexflow.com
- Website: https://cnexflow.com
This Cookies Policy is provided in plain language so you can make an informed decision. It is not a substitute for our full Privacy Policy, which governs all of our data-handling practices.*