1) What this policy covers
We use cookies that are strictly necessary to deliver the service you request (secure login,
session continuity, and abuse prevention). We do not use analytics, advertising, or social media tracking cookies.
Essential cookies do not require consent under EU guidance, but we provide this disclosure for transparency.
Blocking these cookies will prevent login and certificate retrieval.
2) What are cookies?
Cookies are small text files stored by your browser. They help a site function, remain secure, and remember certain
information between requests. Some cookies are essential for a service you request (e.g., authentication); others support
analytics or advertising. certXpress uses only essential cookies.
3) Cookies we use (strictly necessary)
AuthToken |
Encrypted, signed authentication/session state required to sign in and
access certificates. |
First‑party, essential |
Session or configured expiry |
__RequestVerificationToken |
Anti‑CSRF token cookie required to validate form posts and protect your
session. |
First‑party, essential |
Session |
cid |
Correlation identifier used to detect rapid IP rotation and abusive
automation, enabling short‑term soft blocks where appropriate. |
First‑party, essential |
Up to 2 years (sliding) |
Important: If you block or delete these cookies, you will be unable to
sign in or retrieve certificates because core security features will not work.
4) IP addresses and similar identifiers
We process IP addresses for security (rate limiting, abuse/rotation detection, temporary blocks) and
service reliability. We do not use IP addresses for advertising or cross‑site tracking.
5) No analytics or advertising cookies
certXpress does not deploy analytics, marketing pixels, or social media trackers. If our practices change
in the future, we will update this policy and—where required—obtain consent before setting any non‑essential cookies.
6) Managing cookies
You can control cookies in your browser settings. Blocking our essential cookies will prevent login and
certificate retrieval.
7) Region‑specific notes
- EU/EEA & UK: Essential cookies listed above fall under the “strictly necessary”
exemption; we provide notice via this policy and our banner.
- United States: We do not sell or share personal information for cross‑context
behavioral advertising and do not use advertising cookies.
8) Contact
If you have questions about this Cookie Policy, please contact the certXpress team using our contact link.