We set no cookie beyond the strictly necessary ones until you tell us we can. This page lists every cookie and storage key this site can create, who provides it, why it exists and how long it lasts.
Last updated 2 August 2026. Controller: Creative Nexus, India. Contact: info@creativenexus.in.
Analytics and preference storage stay off until you opt in. Refusing is one click, same as accepting.
Cookie settings sits in the footer of every page. Withdrawing is as easy as consenting.
We run no advertising, retargeting or social pixels, and we never sell or share personal data.
A cookie is a small text file a website asks your browser to store. Similar technologies, such as local storage, do the same job with a different mechanism. Both let a site recognise your browser between page loads, which is what keeps you signed in or remembers that you chose dark mode.
This policy covers cookies and every equivalent technology we use, including browser local storage. Wherever we say “cookie” below, we mean both.
We group storage into three categories. We run no advertising or retargeting category at all, because we do not advertise to you or profile you for anyone else.
Required for the site to work: keeping you signed in, protecting forms and sessions, remembering this cookie choice, and processing a payment when you make one. The site cannot function without these.
Legal basis: Exempt from consent under ePrivacy Art. 5(3); legitimate interests under GDPR Art. 6(1)(f).
Remember choices you make, such as light or dark theme, whether the dashboard sidebar is collapsed, and your progress through the free checklist. Turning these off does not break the site, it just forgets your settings.
Legal basis: Consent, GDPR Art. 6(1)(a).
Google Analytics 4, so we can count visits and see which pages are useful. Nothing loads and no analytics cookie is set until you allow this. IP anonymisation and Google Consent Mode are applied.
Legal basis: Consent, GDPR Art. 6(1)(a).
This inventory is generated from the same configuration the consent banner uses, so it cannot drift out of date when the site changes.
| Name | Provider | Type | Purpose | Retention |
|---|---|---|---|---|
| sb-*-auth-token | Supabase (first-party domain)First party | Cookie | Keeps you signed in to your dashboard and ties requests to your account so row-level security applies. | Session, refreshed while you stay active; deleted when you sign out |
| nx_cookie_consent | Creative NexusFirst party | Cookie | Stores this cookie choice, the time you made it and the policy version, so we do not ask again and can evidence your consent. | 6 months |
| rzp_*, checkout session cookies | RazorpayThird party | Cookie | Set only when you open the payment window to complete a purchase, for fraud prevention and to process the transaction. | Session to 1 year, set by Razorpay |
| Name | Provider | Type | Purpose | Retention |
|---|---|---|---|---|
| nx_theme | Creative NexusFirst party | Local storage | Remembers whether you chose the light or dark theme. | Until you clear your browser storage |
| cn_sidebar_collapsed | Creative NexusFirst party | Local storage | Remembers whether you collapsed the dashboard sidebar. | Until you clear your browser storage |
| nx_checklist_v1, nx_checklist_unlocked, cn_launch_checklist_* | Creative NexusFirst party | Local storage | Saves which items you ticked in the free AEO/GEO checklist and the launch checklist, so your progress survives a reload. | Until you clear your browser storage |
| Name | Provider | Type | Purpose | Retention |
|---|---|---|---|---|
| _ga | Google Analytics 4Third party | Cookie | Distinguishes one visitor from another so visit counts are not double-counted. Only set after you allow analytics. | 2 years |
| _ga_LPXPRB9FFS | Google Analytics 4Third party | Cookie | Keeps the state of an individual session for this property. Only set after you allow analytics. | 2 years |
Our pages also load web fonts from Google Fonts. That request does not set a cookie, but it does disclose your IP address to Google as the font is delivered. If you would rather avoid this, browser extensions that block third-party font hosts will stop it without breaking the site.
When you first visit, a banner asks for your choice. Nothing beyond strictly necessary storage is set before you answer, and closing or ignoring the banner is not treated as consent. Optional toggles are off by default, never pre-ticked.
To change your mind later, use here or in the footer of any page. Withdrawal takes effect immediately: we stop the relevant scripts and delete the cookies in the categories you switched off. Withdrawing does not affect the lawfulness of processing carried out before you withdrew.
We record your choice, the time you made it and the version of this policy it relates to, in the consent cookie itself. That record is our evidence of consent under GDPR Art. 7(1). Your choice is stored for six months, after which we ask again.
If your browser sends a Global Privacy Control signal, we treat it as a valid opt-out of analytics and of any sale or sharing of personal information, and we honour it even if you press “Accept all”.
Independently of our banner, every major browser lets you block or delete cookies. Blocking strictly necessary cookies will sign you out and break parts of the dashboard. Instructions: Chrome, Firefox, Safari, Edge.
To opt out of Google Analytics across all sites, Google publishes a browser opt-out add-on.
Only two third parties can place a cookie through this site, and only in the circumstances described above:
Our hosting and database providers (Vercel and Supabase) process requests on our behalf under data processing agreements, but do not set marketing cookies through this site.
Depending on where you live, you have rights over the personal data cookies generate. Under the EU and UK GDPR these include access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time. Under the California CCPA/CPRA you have the right to know, delete, correct, and to opt out of sale or sharing, and we will not discriminate against you for exercising them. Similar rights apply under Brazil’s LGPD, Canada’s PIPEDA, South Africa’s POPIA and India’s Digital Personal Data Protection Act, 2023.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
To exercise any right, email info@creativenexus.in. If you are in the EEA or UK and are unhappy with our response, you may lodge a complaint with your local supervisory authority.
When we add or remove a cookie we update the inventory above and, where the change affects a category you consented to, we raise the policy version so the banner asks you again. The date at the top always reflects the current version.
This policy describes our actual technical setup and is written to meet the GDPR, the ePrivacy Directive, UK PECR and the CCPA/CPRA. It is information, not legal advice. If you operate under a regime with specific local requirements, have your counsel review it before you rely on it.