Effective date: 2026-10-27.
This Cookie Policy explains how wrxstack uses cookies and similar technologies on wrxstack.com and within the wrxstack platform. It supplements our Privacy Policy.
1. What is a cookie?
A cookie is a small text file that a website stores on your device when you visit it. Cookies let a website remember your actions, preferences, and authentication state over a period of time. We also use related technologies, local storage, session storage, and the occasional pixel, and refer to them all as "cookies" in this Policy. Cookies set by us are first-party cookies; cookies set by another organization on a page we serve are third-party cookies.
2. Our approach
We aim to set only the cookies we need to operate the platform safely. We do not run advertising or cross-site ad tracking on our marketing site or in the product, and we do not embed Meta Pixel, LinkedIn Insight, or any similar surveillance ad-tech tag. To understand how our marketing site is used and to improve the product, we use Google Analytics 4 and PostHog product analytics. In the EEA, the UK, and Switzerland, analytics cookies are not set until you accept analytics in our cookie banner. Elsewhere, analytics runs by default and you can decline at any time. We treat the browser-level Global Privacy Control (GPC) signal as an opt-out. We work out your region from approximate signals (for Google, your IP address; for PostHog, your device time zone), which may not always be accurate. We do not use analytics data for advertising or cross-site profiling.
3. Categories of cookies we use
Essential (always on)
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
__wrx_sid | Authenticated session | 1st-party, HttpOnly, Secure | Session (or 30 days with "remember me") |
__wrx_csrf | CSRF token for protected requests | 1st-party, HttpOnly, Secure | Session |
__wrx_auth | Refresh token for silent re-auth | 1st-party, HttpOnly, Secure | 30 days |
__wrx_locale | Language preference for the login pages | 1st-party | 1 year |
Functional
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
__wrx_theme | Remembers light/dark theme preference | 1st-party | 1 year |
__wrx_prefs | Layout, sidebar, and module preferences | 1st-party | 1 year |
__wrx_consent | Records your cookie-preference choices | 1st-party | 1 year |
Security
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
__wrx_rl | Soft rate-limit fingerprint for anonymous endpoints (login, signup) | 1st-party | 24 hours |
Analytics (consent-required)
With your consent, our marketing site uses two analytics services to measure usage and improve the product. They are loaded through Google Tag Manager and the PostHog SDK and are governed by Google Consent Mode v2 plus our own opt-out controls. In the EEA, the UK, and Switzerland, and wherever a GPC signal is present, analytics cookies are not set until you accept. Elsewhere, analytics runs by default until you decline.
- Google Analytics 4 (measurement ID
G-ENEB818Y3T): aggregate traffic, page, and conversion measurement. - PostHog (US cloud): product analytics, heatmaps, and session recordings. Session recording is configured to mask form inputs.
| Cookie / storage | Purpose | Type | Expiry |
|---|---|---|---|
_ga | Google Analytics visitor identifier | 1st-party (Google Analytics) | 2 years |
_ga_ENEB818Y3T | Google Analytics 4 session state | 1st-party (Google Analytics) | 2 years |
ph_…_posthog | PostHog distinct-id and session | 1st-party (PostHog) | 1 year |
wrxConsentAnalytics, wrxCookieConsent | Records your analytics consent choice (local storage) | 1st-party | Until cleared |
wrxAttribution | First/last-touch campaign attribution (local storage; only set when you arrive via a campaign link) | 1st-party | Until cleared |
The tables above describe the cookies in use at the effective date of this Policy; names and expiry periods may change as the Service changes. You can withdraw consent or opt out at any time by choosing Decline in the cookie banner, sending a Global Privacy Control (GPC) signal, or clearing your browser's site data.
Advertising
None. We do not set or permit advertising cookies, and we do not track visitors across other sites.
4. Your controls
- Cookie preferences. Set or change your choice for non-essential cookies in the preferences panel below. Essential cookies cannot be disabled, without them the site cannot keep you signed in safely.
- Browser controls. Most browsers allow you to view, block, and delete cookies. See the help pages for Chrome, Firefox, Safari, or Edge.
- Do Not Track. We honor browser-level Global Privacy Control (GPC) signals as opt-out signals for any non-essential, non-functional processing under the CCPA.
Your cookie preferences
5. Changes
We may update this Policy from time to time. We will give notice of changes where the law or the Terms require it, and the effective date shows the current version.
6. Legal effect of this Policy
This Policy explains our practices. It is not a contract, and it does not create any contractual obligation, warranty, guarantee, or right for you or for any other person. The only agreements between you and wrxstack are the Terms of Service and, where it applies, the Data Processing Addendum.
Timelines and targets in this Policy are goals we aim to meet, not guarantees, except where a law that applies to us sets a deadline, in which case we follow that law. Nothing in this Policy increases wrxstack's liability. The disclaimers, the limitation of liability, and the other protections in the Terms of Service apply to everything this Policy describes. Nothing in this Policy limits a right you have under a law that cannot be limited by agreement.
7. Contact
Questions about this Policy? Email contact@wrxstack.com.