This Cookie Policy explains what cookies and similar browser storage Command Nexus, a company in formation ("Command Nexus," "we," "us") uses on the Command Nexus website and application, and why. Terms not defined here have the meaning given in our Terms of Service and Privacy Policy.
We use three cookies, all set by Command Nexus itself. Every one of them is strictly necessary to run the Service — to keep you signed in, to remember your shopping cart, or to run a security feature you turned on. None of them is used for analytics, advertising, or cross-site tracking, and we run no analytics or advertising services on this site. Because every cookie we set is strictly necessary, we do not show a cookie-consent banner — the law that requires one exempts cookies like ours.
| Name | Purpose | Lifetime | Consent needed? |
|---|---|---|---|
PHPSESSID |
Keeps you signed in, carries CSRF protection, and holds one-off status messages between pages. | Session only — deleted when you close your browser. | No. Strictly necessary for authentication and security. |
cn_cart_token |
Holds a random, non-identifying cart ID so your shopping cart survives logout and closing your browser. Set when you open the cart or add an item. | 7 days, refreshed each time you use the cart. | No. Shopping-cart cookies are a named exemption under the law that requires cookie consent. |
cn_2fa_device |
Remembers that you verified two-factor authentication on this device, so you are not re-challenged on it. Set only if you tick "trust this device" — never on by default. | 30 days from when you tick it. | No. Strictly necessary for account security, and set only after you opt in. |
All three cookies are HttpOnly (not readable by page scripts),
SameSite=Lax (blocked from cross-site requests), and Secure over HTTPS.
None of them contains personal data: the cart and device cookies hold random opaque tokens, and
the two-factor "trusted device" value is checked against a hash stored on our server, not against
readable content in the cookie.
The same rules that apply to cookies also apply to sessionStorage and
localStorage, so we list ours here even though they are not cookies. All of these
exist only to remember a choice you already made, and none is shared with anyone.
sessionStorage — whether you already dismissed a
platform-wide announcement or a promotional banner on this visit (organization-specific
announcements use a separate, durable dismissal that is not sessionStorage), whether your
device's timezone has already been auto-detected and recorded this session (one key per
signed-in identity, so a browser signed into both a member and a platform-admin account
can hold two), and your scroll position after certain form submissions. All of this is
cleared automatically when you close the browser tab.localStorage — two keys, one for the admin ORBAT view and
one for the member roster's ORBAT view, each remembering whether you left that chart
zoomed to fit, so it opens the way you left it next time.These are all preferences you set yourself while using the Service, which the law also treats as exempt from consent.
We do not run analytics (no Google Analytics, no similar service), advertising, or any third-party tracking or profiling script on Command Nexus. We do not sell or share your data for advertising, and no third-party advertising or analytics cookie is set on our pages.
Command Nexus integrates with a small number of outside services for sign-in and payment. None of these sign-in or payment redirects embeds a script on our pages or sets a cookie through us:
Separate from the sign-in and payment redirects above, one kind of page content is loaded directly from outside servers rather than from our own domain. It means your browser — and your IP address — contacts that provider directly, the way it would for any resource hosted off our own domain. It does not set a cookie on our behalf.
cdn.discordapp.com — loaded
only if you have linked a Discord account, and only on pages that display your avatar.The law that requires a cookie-consent banner (the ePrivacy Directive in the EU, and PECR in the UK) exempts cookies that are strictly necessary to provide a service you asked for — which describes every cookie listed above. A banner is required when a site uses cookies for things like analytics or advertising that are not strictly necessary; we don't use any. If that ever changes — for example, if we add a feature that measures behavior across visits — we will add a consent banner before turning it on, and update this page.
You can block or delete cookies through your browser's settings at any time. Because our cookies are what keep you signed in and your cart intact, blocking them will sign you out and may prevent parts of the Service — like checkout — from working correctly.
We may update this Policy as the Service changes. The current version is always available in our Legal Center.
Questions about this Policy: email commandnexusproducts@gmail.com.