Cookie Policy
Last updated: 3 October 2026
This policy explains the cookies and similar technologies used on refactrix.com, what they do, and how you can control them. It should be read with our Privacy Policy.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies, such as your browser's local storage, work in much the same way. Some are needed for a site to work; others, such as analytics cookies, are optional and are only used with your consent.
Your choice
When you first visit, a banner asks whether you accept analytics cookies. “Accept” and “Decline” are equally easy, and nothing optional is loaded until you choose “Accept”. You can change your mind at any time: . If you withdraw consent, we delete the Google Analytics cookies on our domain.
Cookies on the public website
Strictly necessary
These store choices you make and are needed for the site to work as you asked. They don't need consent.
| Name | Type | Purpose | Lasts |
|---|---|---|---|
| theme | Local storage | Remembers whether you chose light or dark mode | Until you clear it |
| refactrix-cookie-consent | Local storage | Remembers whether you accepted or declined analytics cookies | Until you clear it |
Analytics — only if you accept
If you accept, we load Google Tag Manager, which loads Google Analytics 4. Google Analytics uses these cookies to count visits and understand how the site is used. Google acts as our service provider; see how Google uses information from sites that use its services.
| Name | Provider | Purpose | Lasts |
|---|---|---|---|
| _ga | Distinguishes one visitor from another | 2 years | |
| _ga_<ID> | Keeps track of your session | 2 years |
Cookieless measurement
We also use Vercel Web Analytics, which counts page views in aggregate without cookies and without tracking you across other websites. It runs whatever you choose on the banner, because it doesn't store anything on your device.
Cookies in our admin area
Our private admin area (/powerbox) is used only by authorised Refactrix staff. When staff sign in, it sets the cookies below. Visitors to the public site never receive them.
| Name | Purpose | Lasts |
|---|---|---|
| __Secure-authjs.session-token | Keeps a staff member signed in | Up to 30 days |
| __Host-authjs.csrf-token | Protects sign-in forms against cross-site request forgery | Browser session |
| __Secure-authjs.callback-url | Returns the user to the right page after sign-in | Browser session |
| __Secure-authjs.state, __Secure-authjs.pkce.code_verifier | Secure the Google sign-in step | 15 minutes |
| sidebar_state | Remembers whether the admin sidebar is open or collapsed | 7 days |
| ig_oauth_state | Secures connecting our Instagram account | 10 minutes |
Third-party content
Some images are loaded from Unsplash and from our file host, UploadThing. Links to our social media profiles take you to those platforms, which set their own cookies under their own policies once you visit them.
Controlling cookies in your browser
Most browsers let you block or delete cookies and local storage in their settings. Blocking strictly necessary storage may mean the site forgets your theme or cookie choice. Deleting your cookie choice will make the banner appear again.
Changes to this policy
We update this policy whenever the cookies we use change, and revise the date at the top.
Contact
Questions about cookies: mohit.j@refactrix.com.