Cookie Notice
Effective: 2026-08-07
Crosshire aims to keep its footprint on your device minimal. This page explains what we store and why.
1. The complete cookie list
Two cookies exist across all of Crosshire. Not two kinds — two. Both are first-party and strictly necessary for what they do, so neither needs consent under EU rules:
access_token— FitScore only. Keeps you signed in after you click your magic link. HttpOnly and SameSite=Lax; expires with the token.learn_lead_seen— Learn. Set only if you enter your email at one of the optional prompts, so we stop asking. It holds the value1— no email, no identifier. 90 days, SameSite=Lax, and readable by the page (not HttpOnly), because the page needs to check it. In production it is scoped to the whole crosshire.ch domain.
Earlier versions of this page claimed a CSRF cookie and SameSite=Strict. Neither was accurate: no CSRF cookie is set anywhere, and both real cookies are Lax. The dismissal of our cookie banner — which appears on FitScore only — is recorded in local storage, not in a cookie.
2. Analytics — read this one
We used to use Plausible, and this page used to tell you that analytics collected no personal data. Both facts have changed. Since June 2026 we run our own tracker instead, and it is only cookieless in the narrow sense that matters least to you.
It genuinely sets no cookie — it keeps a random per-tab ID in sessionStorage that your browser throws away when you close the tab. But that says nothing about what reaches our server, and what reaches it on every page load is your raw IP address, your full User-Agent string, the page path, and the full URL you came from, kept for 180 days and linked across our sites by IP and browser together.
No consent prompt appears, but not for want of anything to tell you. We rely on legitimate interest, and you can object — Privacy Policy §2.0 lists every field, and §3 explains how.
3. No advertising trackers
Crosshire does not embed advertising networks, social media pixels, or any third-party scripts that set their own tracking cookies. We do not run targeted advertising and we do not share data with ad networks.
4. Local storage and session storage
All of this stays on your device and none of it is transmitted to us: your theme choice, Learn course progress and language preferences, the record that you accepted the notice shown before Learn's AI tools will grade your work (learn_grading_consent_v2), the dismissal of the FitScore cookie banner, a FitScore layout preference, and — in session storage, discarded when the tab closes — the tracker's per-tab ID (cx-tracker-session). You can clear all of it through your browser settings.
5. Your choices
You can control cookies and local storage through your browser settings. Disabling essential cookies will affect features that rely on them, such as staying signed in. Because we do not use advertising or tracking cookies, there is no third-party opt-out to manage.
One limit worth being straight about: clearing your browser storage does not stop the tracker in §2, because it never relied on that storage — it records the IP and User-Agent of the request itself. Stopping it from your side means stopping the request. From our side, write to darshansingh@crosshire.ch and we will exclude your address.
6. Updates
If we ever introduce additional cookies or trackers, this page will be updated with a new effective date and, where required, we will ask for your consent before any non-essential cookie is set.
7. Contact
Questions about cookies or storage? Email darshansingh@crosshire.ch.