Cookie Policy
1. Introduction
This Cookie Policy explains how HEXYL LTD (trading as "Hexyl AI"), a company registered in Scotland (Company Number SC875134), uses cookies and similar technologies when you visit our platform at hexyl.ai (the "Platform").
This policy should be read alongside our Privacy Policy, which explains how we collect and use your personal data more broadly. We comply with the UK Privacy and Electronic Communications Regulations 2003 (PECR) and the UK General Data Protection Regulation (UK GDPR).
2. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and supply information to site owners.
There are two main types of cookies:
- Session cookies: Temporary cookies that are deleted when you close your browser. They are used to remember your actions during a single browsing session.
- Persistent cookies: Cookies that remain on your device for a set period or until you delete them. They are used to remember your preferences across multiple visits.
3. How We Use Cookies
We use cookies on the Platform for the following purposes:
- Essential cookies: Required for the Platform to function. These handle authentication, session management, and security (CSRF protection). They cannot be disabled.
- Analytics cookies: Help us understand how visitors use the Platform so we can improve it. These cookies collect information about page visits, traffic sources, and user interactions.
- Functional cookies: Remember your preferences such as language settings, theme choices, and dashboard configurations.
- Marketing cookies: Used to track advertising effectiveness when you connect advertising integrations. These are currently disabled by default and will only be activated with your explicit consent.
4. Cookie Details
The following table lists the specific cookies used on the Platform:
4.1 Essential Cookies
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Hexyl_session | Hexyl AI | Encrypted session cookie that maintains your authenticated state and stores session data securely. | Session (HttpOnly, Secure) | 2 hours |
| XSRF-TOKEN | Hexyl AI | Cross-Site Request Forgery protection token. Prevents unauthorised actions on your behalf. | Session (Secure) | 2 hours |
4.2 Analytics Cookies
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _ga | Google Analytics (via GTM) | Distinguishes unique visitors by assigning a randomly generated identifier. | Persistent | 2 years |
| _gid | Google Analytics (via GTM) | Distinguishes users for analytics reporting within a 24-hour window. | Persistent | 24 hours |
| _ga_* | Google Analytics 4 (via GTM) | Maintains session state for GA4 measurement. The suffix is unique to each GA4 property. | Persistent | 2 years |
4.3 Marketing Cookies (Currently Disabled)
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| _fbp | Meta (Facebook) | Tracks visits across websites to deliver relevant advertisements via the Meta advertising network. | Persistent | 3 months |
| _clck | Microsoft Clarity | Persists the Clarity user identifier and preferences such as opt-out status. | Persistent | 1 year |
| _clsk | Microsoft Clarity | Connects multiple page views by a user into a single Clarity session recording. | Persistent | 1 day |
5. Legal Basis (UK PECR)
Under the UK Privacy and Electronic Communications Regulations 2003 (PECR):
- Essential cookies (session and CSRF) are exempt from the consent requirement under Regulation 6(1), as they are strictly necessary for the provision of the service you have requested.
- Analytics and marketing cookies require your informed consent before being placed on your device, as they are not strictly necessary for the service.
We currently deploy Google Analytics via Google Tag Manager on our marketing pages. We acknowledge that a formal cookie consent mechanism (banner) is not yet implemented and are actively working to introduce one to ensure full PECR compliance. In the interim, analytics data collection is limited to aggregated, non-personally-identifiable information where possible.
Marketing cookies (Meta Pixel, Microsoft Clarity) are currently disabled and will not be activated until a proper consent mechanism is in place.
6. Managing Cookies
You can control and manage cookies through your browser settings. Please note that removing or blocking cookies may affect the functionality of the Platform. Here is how to manage cookies in popular browsers:
- Google Chrome: Settings > Privacy and Security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies
You can also opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.
7. Third-Party Cookies
Some cookies on the Platform are set by third-party services. We do not control these cookies. The relevant third-party privacy policies are:
- Google Analytics: Google Privacy Policy
- Meta (Facebook): Meta Privacy Policy (when enabled)
- Microsoft Clarity: Microsoft Privacy Statement (when enabled)
8. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our data practices. We will post the updated policy on this page and update the "Last updated" date. We encourage you to review this page periodically.
9. Contact Us
If you have any questions about our use of cookies, please contact us:
HEXYL LTD
18 Woodside Place, 2nd Floor
Glasgow, Scotland, G3 7QL
Email: privacy@hexyl.ai
Website: hexyl.ai