This document is provided in English and Georgian. In case of discrepancy, the English version shall prevail.
- Document
- Cookies Policy
- Version
- 1.1
- Effective Date
- 15 October 2026
- Last Updated
- 15 October 2026
- Operated by
- Nixyum LLC · Reg. No. 400458045
- Registered Address
- Tbilisi, 13 Nikoloz Janashia Street, Georgia
- Governing Law
- Georgia
1. Introduction
This Cookies Policy explains how Nixyum LLC ("Nixyum", "we", "us") uses cookies and similar technologies on the Nixyum website and mobile applications (together, the "Platform"). It describes what these technologies are, which ones we deploy, the legal basis for each, and how Users can manage their preferences.
This Policy forms part of the Nixyum Policy Suite and must be read together with the Privacy Policy and the Master Definitions. Capitalised terms used but not defined herein have the meanings assigned in the Master Definitions.
By accessing the Platform, Users are subject to this Policy. The Platform uses strictly necessary cookies and similar technologies, and one optional category, Analytics, which is off unless the User turns it on. The Platform does not use advertising cookies.
2. What Are Cookies and Similar Technologies?
A cookie is a small text file placed on a User's device (computer, smartphone, tablet) when the User visits a website or uses an application. Cookies allow the Platform to recognise the User's device on subsequent visits and to store certain information about how the User interacts with the Platform.
2.1 Types of Cookies by Duration
- Session cookies: Exist only for the duration of the browser session. They are deleted automatically when the User closes their browser or logs out.
- Persistent cookies: Remain on the User's device after the browser session ends, for a defined expiry period. Used primarily to maintain authentication across visits.
2.2 Types of Cookies by Origin
- First-party cookies: Set by Nixyum directly on the Platform domain.
- Third-party cookies: Set by external service providers on their own domains, when those services are integrated into the Platform. The only third-party cookies on the Platform are security cookies set by Cloudflare, Nixyum's security provider (see Section 4).
2.3 Similar Technologies
In addition to cookies, the Platform uses:
- Local storage: A browser mechanism for keeping data on the User's device beyond the browser session, readable only by the Platform. The Platform uses it for the User's cookie choice, which of the User's two Personas, Nex or Nyx, is active, a short-lived security token, unsent drafts, and interface preferences such as theme, language and time zone. When the User signs out, it is cleared except for the cookie choice and two interface preferences (time zone and feed filter).
- Browser databases: The Platform keeps a queue of messages being sent and a cache of links to attachments; both are deleted when the User signs out. If the User allows notifications, the push notification service (Google Firebase) keeps its registration in the browser.
- Web beacons / pixels: Invisible images embedded in pages or emails that report when they are viewed. The Platform does not use web beacons or pixels.
- Mobile apps: The apps keep the User's sign-in in the device's secure storage (the Keychain on iOS, the Keystore on Android) and settings in the app's own storage. The only third-party software development kit they include is Google Firebase Cloud Messaging, for push notifications. They include no analytics or advertising software and use no advertising identifier.
3. Categories of Cookies We Use
3.1 Strictly Necessary Cookies and Technologies
These cookies and equivalent technologies are essential for the Platform to function. They enable core services including User authentication, session management, security (including cross-site request forgery protection and bot mitigation), and the recording of cookie-consent choices. Without these, the Platform cannot be provided.
Legal basis: These fall within the exemption for technologies strictly necessary to provide a service explicitly requested by the User. No consent is required. Supplementary legal bases — Contract (performance of the Terms of Service) and Legitimate Interest (platform security and integrity) — apply to any Personal Data processed via these cookies. We disclose them here in the interest of full transparency.
3.2 Analytics — Only With Your Consent
Analytics is the only optional category. If the User turns it on, the Platform measures how fast pages load and respond (the page's path, the timings and the platform) and records how features are used, so that Nixyum can make the Platform faster and better. These measurements go only to Nixyum's own servers, are never used for advertising, and are kept for 90 days. Analytics is off unless the User turns it on, and the User can turn it off at any time. It sets no cookie.
- Functional cookies: none. Preferences such as theme and language are kept in local storage as part of the service the User asked for.
- Advertising cookies: none. Nixyum shows no advertising and uses no retargeting or ad-measurement technology.
- Third-party analytics: none. Nixyum uses no Google Analytics or any similar third-party analytics service.
Legal basis: Consent. If Nixyum ever introduces another optional category, or uses Analytics for anything more than this Section describes, this Policy will be updated first and Users will be asked for their consent again before it applies to them.
4. Cookie Table
The following table sets out the cookies and similar technologies currently deployed on the Platform. This table is updated whenever the Platform's cookie deployment changes.
Strictly Necessary cookies — No consent required (Legal Basis: Contract / Legitimate Interest)
| Name | Purpose | Category | Duration |
|---|---|---|---|
session_id | Keeps the User signed in | Strictly Necessary | 30 days, or up to 400 days if the User chooses to stay signed in |
auth_status | Tells the app the User is signed in | Strictly Necessary | Same as session_id |
oauth_state, oauth_intent, oauth_platform | Protects sign-in with Google or Apple | Strictly Necessary | 10 minutes, only while signing in with Google or Apple |
__cf_bm, cf_clearance, Cloudflare Turnstile | Bot protection and security, set by Cloudflare | Strictly Necessary (third-party security) | From the end of the visit up to one year |
| Sign-in in the apps (not a cookie) | Keeps the User signed in to the iOS or Android app | Strictly Necessary | Up to 730 days |
Similar technologies — Local storage (first-party, origin-scoped)
| Name | Purpose | Category | Duration |
|---|---|---|---|
| The User's cookie choice | Remembers the choice, so the banner is not shown again | Strictly Necessary | 12 months from the last choice, or until this Policy's version changes; kept when the User signs out |
| The active Persona | Remembers whether the User is using their Nex or their Nyx | Strictly Necessary | Until the User signs out |
| A security token | Protects the User's requests against forgery | Strictly Necessary | 1 hour; cleared when the User signs out |
| Drafts and interface preferences | Unsent drafts, theme, language, time zone and similar settings | Strictly Necessary (part of the service the User asked for) | Until the User signs out; time zone and feed filter are kept |
Note: Analytics measurements are sent to Nixyum's own servers only if the User allows Analytics, and they set no cookie. The User's cookie choice is also recorded on Nixyum's servers to evidence consent (see Section 6.3). No advertising technology is used on the Platform.
5. Legal Basis for Cookie Processing
Nixyum processes cookie-based data under the following legal bases as defined in the Master Definitions and consistent with the Georgian Data Protection Law and, by harmonisation, the GDPR:
- Strictly Necessary: Contract (the technologies are required to deliver the service the User has requested) and Legitimate Interest (platform security). No consent is required.
- Analytics: Consent. The User must actively turn Analytics on, and may turn it off at any time without affecting their access to the Platform.
6. Consent — How We Obtain and Manage It
Nixyum operates a consent management mechanism designed to satisfy the requirements of the Georgian Data Protection Law and, by harmonisation, the GDPR for cookies and similar technologies that require User consent.
6.1 Consent Banner
On the User's first visit to the Platform (and when the recorded choice expires or this Policy's version changes), Nixyum shows a cookie consent banner with two categories: Strictly Necessary (always active) and Analytics. Users may accept Analytics, reject it, or open the settings to read what each category covers.
The banner does not pre-select Analytics. Strictly Necessary technologies are disclosed but not offered as a choice, as they do not require consent.
6.2 Withdrawal and Modification of Consent
Users may withdraw or modify their recorded consent preference at any time without detriment, and withdrawal does not affect the lawfulness of any processing carried out before withdrawal. To modify the recorded preference:
- Open the cookie settings with the "Cookie settings" link: at the bottom of the Platform's welcome page, below the menu in the left column on a computer, or at the bottom of the menu on a phone.
- Turn Analytics on or off and save.
- Alternatively, clear the Platform's site data in the browser settings and revisit the Platform to see the consent banner again.
6.3 Consent Records
Nixyum records each consent decision: the choice, the time, the version of this Policy then in force and the platform. The current choice is stored on the User's device for 12 months from the last decision, so that the banner is not shown again unnecessarily; it is kept when the User signs out, because it belongs to the device, not to the account. A record is also kept on Nixyum's servers for 3 years, with the IP address only as a salted hash, to evidence consent under the Georgian Data Protection Law.
7. User Rights and Choices
7.1 Cookie Consent Mechanism
Users may change their cookie choice at any time in the cookie settings, opened with the "Cookie settings" link at the bottom of the welcome page, below the menu in the left column on a computer, and at the bottom of the menu on a phone.
7.2 Browser Controls
Most browsers provide built-in controls to manage cookies independently of the Platform's consent mechanism. Users may delete existing cookies stored by the Platform, block all cookies or cookies from specific domains, or configure the browser to notify them before a cookie is set.
Note: Blocking or deleting strictly necessary cookies will impair core Platform functionality, including authentication. Nixyum recommends managing preferences through the in-Platform consent manager rather than blanket cookie blocking.
Browser cookie management guides: Chrome — Settings > Privacy and security > Cookies and other site data; Firefox — Settings > Privacy & Security > Cookies and Site Data; Safari — Preferences > Privacy; Edge — Settings > Cookies and site permissions; Mobile browsers — refer to the browser's privacy or settings menu.
7.3 Mobile Application Controls
In the Nixyum mobile apps, the same choices apply, and the apps keep data on the device as described in Section 2.3. Users may:
- Change the cookie choice with the "Cookie settings" link at the bottom of the app's menu.
- On iOS: Nixyum never asks for permission to follow Users across other companies' apps and websites, because it does not do so.
- On Android: Nixyum does not use the advertising ID.
- Uninstall the app to remove all data stored on the device. Data held on Nixyum's servers is subject to the Data Retention & Deletion Policy.
8. Third-Party Cookies and Services
The only third-party cookies on the Platform are the security and bot-protection cookies set by Cloudflare (see Section 4). If the User allows notifications, Google Firebase delivers them and keeps its registration on the device. Nixyum does not embed social media widgets, video players, web fonts, analytics services or advertising networks from other companies. In private messages, link previews, including their images, are fetched by Nixyum's servers, so the linked website, or the service that hosts the image, does not learn who is viewing them.
Nixyum enters into data processing agreements with all third-party service providers that process Personal Data on its behalf; they are listed in Section 7.2 of the Privacy Policy. If additional third-party integrations are introduced in the future, this Policy will be updated before they are activated, and Users will be asked for consent again where required.
9. Cookies and Privacy
Cookie-based data is Personal Data to the extent it relates to an identified or identifiable User. All such data is processed in accordance with the Nixyum Privacy Policy, the Master Definitions, and the Georgian Data Protection Law.
Nixyum does not use cookies or similar technologies to:
- Collect Personal Data unrelated to the User's use of the Platform.
- Build advertising profiles based on behaviour across third-party websites.
- Process Special Category Data.
- Re-identify anonymised or pseudonymised data.
Consent records are retained for 3 years to demonstrate compliance with applicable law, as set out in Section 6.3 and the Data Retention Schedule.
10. Data Subject Rights
In relation to Personal Data processed through cookies, Users have the following rights under the Georgian Data Protection Law and, by harmonisation, the GDPR:
- Right of Access: To obtain confirmation of whether cookie-based Personal Data is processed, and to receive a copy of that data.
- Right to Rectification: To request correction of inaccurate cookie-based Personal Data.
- Right to Erasure: To request deletion of cookie-based Personal Data, subject to applicable retention obligations.
- Right to Restriction of Processing: To request restriction of processing in certain circumstances.
- Right to Object: To object to processing based on Legitimate Interest. Nixyum will cease such processing unless it can demonstrate compelling legitimate grounds.
- Right to Data Portability: In relation to cookie-based Personal Data processed on the basis of Contract or Consent and by automated means, to receive that data in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: To withdraw consent for non-essential cookies at any time through the Platform's consent mechanism. Withdrawal does not affect prior lawful processing.
- Right to Lodge a Complaint with the Supervisory Authority: To lodge a complaint with the State Audit Office of Georgia (SAO) — the supervisory authority for personal data protection in Georgia — through its dedicated portal at pdp.sao.ge, if the User believes their rights under the Georgian Data Protection Law have been infringed.
To exercise any of the above rights, contact: [email protected]. Nixyum will respond in accordance with the response timelines set out in the Master Definitions and the Privacy Policy.
11. Changes to This Policy
Nixyum may update this Cookies Policy from time to time to reflect changes in the cookies deployed, applicable law, regulatory guidance, or Platform functionality. Material changes — including the addition of new cookie categories or new third-party providers — will be communicated to Users at least thirty (30) days before taking effect, via a notice on the Platform or by email. A shorter notice period may apply where a change is required by law or necessary for security or regulatory compliance. A correction or clarification that does not change Users' choices or how cookies and similar technologies are used is not a material change and takes effect when it is published.
Where a change requires fresh consent (for example, a new optional category, or Analytics covering more than Section 3.2 describes), Nixyum will present a new consent banner before the relevant cookies are set, regardless of any previously granted consent.
The "Last Updated" date above reflects the most recent version of this Policy. The current version is always published on the Platform.
12. Contact and Data Controller
- Legal Entity
- შ.პ.ს ნიქსიუმი / Nixyum LLC
- Registration No.
- 400458045
- Registered Address
- Tbilisi, 13 Nikoloz Janashia Street, Georgia
- Privacy & Data Protection
- [email protected]
- General
- [email protected]
- Supervisory Authority
- State Audit Office of Georgia (SAO) · pdp.sao.ge
© 2026 Nixyum LLC. All rights reserved.