Effective Date: July 25, 2026 · Last Updated: August 13, 2026
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, authenticate your session, and understand how you use the site.
These cookies are necessary for the Service to function and cannot be disabled in our systems.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| esx_token | JWT authentication token | 30 minutes (session) | HttpOnly, Secure, SameSite=Lax |
| csrf_token | CSRF protection token | Session | Secure |
No consent required for essential cookies under GDPR (strictly necessary exemption) and CCPA.
With your consent, we may use analytics cookies to understand usage patterns and improve the Service.
| Provider | Purpose | Data Collected |
|---|---|---|
| (Not yet implemented) | Page views, feature usage | Anonymous usage metrics |
Status: Analytics cookies are not currently deployed. If enabled in the future, opt-in consent will be required.
With your consent, we may use marketing cookies for promotional communications.
Status: Marketing cookies are not currently deployed. If enabled in the future, opt-in consent will be required.
ESXPress does not currently display a cookie consent banner. Because we deploy only essential cookies (see Section 2.1), which are exempt from consent requirements under GDPR and CCPA, no consent is required or collected today.
We do not currently use analytics or marketing cookies (see Sections 2.2 and 2.3). If we deploy non-essential cookies in the future, we will implement a consent banner offering opt-in choices before any non-essential cookie is set, and consent preferences will be recorded and manageable through your account settings.
Because only essential cookies are used, there is no consent preference to manage or withdraw. You can always control cookies through your browser settings (see Section 6), and you can contact us at any time:
ESXPress uses these third-party services that may set cookies:
| Service | Purpose | Cookie Domain |
|---|---|---|
| Stripe | Payment processing | js.stripe.com |
| Cloudflare | Security/CDN | cloudflare.com (__cf_bm) |
Third-party cookies are subject to the respective providers’ privacy policies.
| Cookie Type | Max Duration |
|---|---|
| Session cookies | Deleted when browser closes |
| Persistent cookies | None currently deployed |
| Authentication token | 30 minutes (configurable) |
Most browsers allow you to control cookies through settings:
Note: Blocking essential cookies may prevent the Service from functioning properly.
ESXPress does not currently respond to browser “Do Not Track” signals because no industry standard for DNT response has been adopted. We do not track users across third-party websites.
We may update this Cookie Policy from time to time. Material changes will be communicated via email to account holders and/or a notice on our website.
For questions about our cookie practices: