Cookie Policy

Every cookie JBEX sets and why. None of them are for advertising or analytics.

In effect from October 22, 2026Version 2026-10-22-draft

Draft under legal review

Our legal counsel is still reviewing this text. It may change before public sign-up opens, and you'll be asked to accept the final version.

On this page

1. What cookies are

Cookies are small files a website asks your browser to keep, so it can recognise you on the next page. JBEX uses only the cookies it needs to work and to remember a few choices you make. There are no advertising or analytics cookies on JBEX.

2. Cookies that keep you signed in and safe

On the live site these cookies carry the __Host- prefix: only JBEX can read or set them, and only over an encrypted connection. Pages can't read them from the browser.

  • jbex-session: keeps you signed in. It ends when you sign out, after 30 minutes without activity, or after 7 days.
  • jbex-mfa: remembers, for 10 minutes, that you entered your password correctly while you type your two-step code.
  • jbex-oauth and jbex-google-link: used for 10 minutes while you sign in with Google, to check that the answer really comes from Google and belongs to your attempt.

Our network provider, Cloudflare, may also set a short-lived security cookie to tell people apart from automated traffic.

3. Cookies that remember your choices

  • NEXT_LOCALE: the language you last chose, for one year.
  • jbex-theme: light or dark appearance, for one year.
  • jbex-sidebar: whether the side menu is open or collapsed, for one year.
  • jbex-order-mode: whether the order form opens in its simple or advanced mode, for one year.

4. Your choices

You can delete or block cookies in your browser settings. Without the sign-in cookies you can't sign in; without the preference cookies JBEX simply forgets your choices.

5. Changes

If we add or change a cookie, this page is updated with a new date.

Questions about this document?

Write to us and a person from our team will answer.

Contact us