Last updated: 15 October 2026
Cookies are small text files stored on your device when you visit our website. They allow the site to remember information between pages and visits (for example, your logged-in session). This policy also covers equivalent technologies such as localStorage and sessionStorage, which are governed by the same regulations (Art. 22.2 LSSI-CE).
Essential for the service to function. No consent required (Art. 22.2 LSSI-CE).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| sb-<proyecto>-auth-token | Supabase | Keeps you signed in and renews your session (it may be split into several parts: .0, .1…) | Until you sign out (max. 400 days) |
| NEXT_LOCALE | LexyAi | Remembers your language (Spanish / English) | Session |
| __stripe_mid | Stripe | Payment fraud prevention (during checkout only) | 1 year |
| __stripe_sid | Stripe | Secure payment session identification | 30 minutes |
| lexyai_analytics_consent | LexyAi (localStorage) | Remembers your analytics cookie decision | Persistent |
| theme | LexyAi (localStorage) | Visual theme preference (light / dark) | Persistent |
| sentryReplaySession | Sentry (sessionStorage) | Error diagnosis: if something fails, keeps a recording of the last moments on screen with all text masked, so we can fix the bug | Session |
They help us understand how LexyAi is used, in aggregate and pseudonymised form, to detect errors and improve the product. They include session recordings in which all text and form fields are masked: we see the layout and the cursor movement, never the content. They are not loaded until you expressly accept the cookie notice and are deactivated as soon as you withdraw consent. We do not record the content of your contracts or any identifying data beyond the opaque internal identifier already used for your account.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| ph_*_posthog | PostHog (EU) | Pseudonymous browser identifier for usage analytics and session recording | 1 year |
| __ph_opt_in_out_* | PostHog (EU) | Analytics consent status for PostHog | 1 year |
PostHog (on its European instance, eu.i.posthog.com) and Supabase (in its European region) process data within the European Economic Area (EEA). Stripe may process payment-related data in the United States, covered by the EU-US Data Privacy Framework and the European Commission's standard contractual clauses, as described in section 7 of the Privacy Policy.
Your decision on analytics cookies can be revoked at any time. Current status: pending.
You can also configure your browser to block or delete cookies. Note that disabling strictly necessary cookies (Supabase) will prevent access to your account and the service. Instructions vary by browser:
If in the future we add new types of cookies or change providers, we will update this page and, where necessary, ask for your consent again. The last updated date appears at the top of this document.