EN
Get Shieldix

Legal

Cookie policy

Draft. This text is being prepared and does not apply yet. This text was prepared with the help of software and must be reviewed by a qualified lawyer before publication.

shieldix.uk, the Shieldix plugin and Shieldix Cloud are provided by Nexys S.r.l., registered office Galleria Arrigo Protti 2, 34121 Trieste (TS), Italy, VAT number (Partita IVA) IT01447020320 (“Nexys”, “we”, “us”).

The site uses no analytics, no advertising and no tracking cookies, and lets no other company set cookies through it. For visitors who neither sign in nor use the shop, the site itself sets at most one cookie: a functional cookie set only when you choose a language.

Under Italian law (article 122 of the Italian Privacy Code) and the Garante’s guidelines on cookies and other tracking tools of 10 June 2021, technical cookies that are strictly necessary for a service you ask for need no consent, only this information. This is why the site shows no consent banner. If we ever add cookies that need consent, we will ask for it first.

  • shieldix_lang: the language you chose in the language menu, so the site keeps showing it. Set only when you choose a language; it holds the language code and nothing else. Lasts 1 year; HttpOnly, SameSite=Lax, and Secure on HTTPS.

WordPress sets these only when you open the sign-in page or sign in:

  • wordpress_test_cookie: checks that your browser accepts cookies; ends when you close the browser.
  • wordpress_logged_in_… and wordpress_sec_…: keep you signed in; they end when you close the browser, or after 14 days if you chose “Remember Me”.
  • wp-settings-… and wp-settings-time-…: your preferences in the WordPress admin screens; 1 year.

Payments are made on PayPal’s own pages. The site sets no PayPal cookies and loads nothing from PayPal; PayPal uses its own cookies, under its own policy, only once you go to PayPal.

The WhatsApp chat button sets no cookies and loads nothing from WhatsApp: it is a plain link, and the panel it opens is part of this site. Only when you choose “Open WhatsApp” does your browser or the WhatsApp app connect to WhatsApp, which then uses its own cookies under its own policy.

The shop (cart, checkout and My account) runs on WooCommerce. It sets these cookies only when you use it, and they are strictly necessary for what you ask for (buying a plan or AI credits, your account):

  • wp_woocommerce_session_…: links your browser to your cart and checkout, which are kept on our server. Set when you put AI credits in the cart or pay for an order. Lasts 2 days, or 7 days while you are signed in; HttpOnly, and Secure on HTTPS.
  • woocommerce_items_in_cart and woocommerce_cart_hash: tell the site that your cart has changed, so pages show it correctly. Set while the cart holds something; they end when you close the browser.
  • wp-resetpass-…: set while you choose a password from the link in an email (a new account or a password reset); ends when you close the browser. HttpOnly.

WooCommerce can also set woocommerce_recently_viewed (products you viewed, only with its “recently viewed products” widget) and store_notice… (that you closed a store notice). The shop uses neither the widget nor a store notice, so these are not set. If a page shows WooCommerce’s mini cart, your browser also keeps the cart in its own storage: wc_fragments_… and wc_cart_hash_… in session storage (cleared when you close the tab or the browser) and wc_cart_created in local storage (until the cart changes or you clear it). This storage stays in your browser and is used only to show your cart.

Signing in to My account uses the WordPress sign-in cookies above. WooCommerce’s order attribution and usage tracking are switched off, so the shop sets no tracking cookies. [CHECK THE COOKIE LIST AGAIN AFTER EVERY WOOCOMMERCE UPDATE (LAST CHECKED: WOOCOMMERCE 11.2)]

Cloudflare, which protects the site, may set its own strictly necessary security cookies. [CLOUDFLARE COOKIES, TO BE CONFIRMED AFTER DEPLOYMENT]

The Shieldix Cloud panel at [PANEL ADDRESS] sets one cookie when you sign in: shx_sid, your session. HttpOnly and SameSite=Strict; the session ends after 60 minutes without activity and after 12 hours at most.

You can delete cookies or block them in your browser’s settings. If you delete shieldix_lang, the site may pick a language for you again; if you block the sign-in or shop cookies, you cannot sign in or buy. More about how we handle data: see the privacy policy.

This version applies from [DATE].