Cookie Notice

This notice lists everything UXPLIMA stores in your browser and why. The short version: we use only cookies that make the site work or that remember a choice you made. There are no advertising cookies, no analytics cookies and no third-party trackers - which is why you do not see a cookie banner.

1. Cookies that keep you signed in

These are set by our API when you sign in, for this site's domain and its subdomains. They are secure (sent only over HTTPS), not readable by scripts on the page, and not used for anything but your session.

• __Secure-better-auth.session_token - Keeps you signed in; how long: 30 days, renewed while you use the site; removed when you sign out
• __Secure-better-auth.session_data - A short-lived copy of your session, so every page does not have to ask the server; how long: 60 seconds
• __Secure-better-auth.state - Protects a sign-in with Discord, Google, GitHub or Roblox against forgery; how long: 5 minutes
• __Secure-better-auth.two_factor - Remembers that you are halfway through a two-factor sign-in; how long: 10 minutes
• __Secure-better-auth.trust_device - Skips the two-factor step on this device - only if you tick “trust this device”; how long: 30 days; you can revoke trusted devices in your account

2. Cookies that remember your choices

• PARAGLIDE_LOCALE - Remembers the language you are reading the site in; how long: 400 days
• uxp-theme - Remembers light or dark mode - set only when you switch; how long: 1 year
• uxp-currency - Remembers the currency you chose for approximate prices - set only when you choose one; how long: 1 year

3. Other browser storage

• uxplima.dismissed-announcements (local storage) - Remembers which site announcements and document-change notices you closed, so they stay closed

4. What we do not use

• No analytics cookies. We count page views without cookies: our server derives a one-way code from your IP address and the date, keeps it in memory for at most 25 hours so that a reload is not counted twice, and stores only the number of views per page per day. The code cannot be turned back into your IP address and is never linked to your account.
• No advertising or social-media trackers, and no third-party scripts on our pages.

5. Other parties

• Cloudflare, which carries all traffic to this site, may set a short-lived security cookie (such as __cf_bm) to tell people from bots. It is strictly necessary for the site's protection.
• Tebex sets its own cookies on its payment page when you pay. Those are covered by Tebex's own privacy policy.

6. Your control

You can delete or block cookies in your browser settings at any time. If you block the sign-in cookies you will not be able to sign in; the choice cookies only mean the site forgets your language, theme or currency.

For how we handle personal data in general, see the Privacy Policy.