Cookie and Local Storage Policy
Effective: 12 October 2026
This policy explains how OVERXXI LTD, company number 17514130, registered in England and Wales, with its registered office at 2B Thorpe Crescent, Walthamstow, E17 5BY, United Kingdom, uses cookies, browser storage and related technologies on overxxi.com. It should be read with our Privacy Policy. The public website is designed so that optional analytics remains disabled unless a visitor makes a clear choice to accept it.
1. Scope and responsibility
OVERXXI LTD is responsible for the storage and access technologies described on this page. The policy applies to the public OVERXXI website, including language-specific pages and public product information. The authenticated OVERXXI Gate Pro workspace and Android application may use separate security tokens, device storage or session mechanisms that are necessary to provide signed-in functions. Those mechanisms are described in the Privacy Policy and relevant product information. This page does not authorise third parties to place advertising trackers, and OVERXXI does not use the public website to serve third-party behavioural advertising.
Questions about this policy can be sent to privacy@overxxi.com. Please do not include passwords, card details, authentication codes or confidential customer records in an email. We may ask for sufficient information to understand and answer a request, but we will not ask for a password or secret key.
2. What cookies and storage technologies are
A cookie is a small item of data that a website asks a browser to store on a computer, phone or other device. Local storage is a browser facility that can retain a preference without sending that preference with every web request. Similar technologies can include pixels, software development kits, identifiers and scripts that access information on a device. The relevant rules apply to the act of storing or accessing information, not merely to files called cookies. For clarity, this policy uses “storage technologies” as a collective description.
Some storage is necessary for a service requested by the visitor, such as remembering a privacy choice or maintaining a secure authenticated session. Other storage is optional. Audience measurement is useful to us, but the public website remains available without it. We therefore keep Google Analytics disabled until the visitor gives affirmative consent through the privacy controls.
3. Essential storage used by the public website
The public website uses a local storage entry called overxxi-cookie-consent-v1. It records the policy version, whether analytics was accepted or rejected, that essential storage is active, and the time at which the choice was updated. This record prevents the consent panel from appearing on every page and allows the website to respect the most recent choice. It remains until the visitor clears browser data, changes the choice or a later policy version requires a renewed decision.
The website may also use overxxi-public-language to remember a selected language. This preference allows a returning visitor to reach the relevant language edition and is not used to build an advertising profile. It remains in local storage until the visitor clears it or selects another language. Rejecting analytics does not disable either of these essential preference mechanisms because they are used to provide the privacy and language choices requested by the visitor.
4. Optional Google Analytics
With consent, we load Google Analytics using measurement identifier G-FXWQJR670Q. Analytics helps us understand aggregated patterns such as which public pages are viewed, the approximate source of a visit, device and browser characteristics, broad geographic information, navigation events and basic engagement. We use this information to find broken journeys, decide which guidance is useful and improve the presentation of OVERXXI Gate Pro. We do not use Analytics to make eligibility, employment, credit, safety or similarly significant decisions about a visitor.
Google Analytics commonly uses cookies whose names begin with _ga. Depending on Google’s implementation, _ga and a property-specific _ga_... cookie may remain for up to two years unless they are removed earlier. Google may update technical details over time. Our consent tool prevents the Analytics library from loading before acceptance, configures IP anonymisation where supported and attempts to remove OVERXXI-domain Analytics cookies when consent is withdrawn.
5. Consent choices
On the first visit, the privacy panel offers “Accept analytics”, “Reject analytics” and “Manage settings”. Accepting and rejecting are presented as genuine choices. Continuing to browse, scrolling or closing a browser does not count as consent. If the visitor accepts, optional Analytics may load from that point. If the visitor rejects, the website stores the rejection so it can continue to keep Analytics disabled. Selecting “Manage settings” provides a separate explanation of essential storage and the optional analytics category.
The choice applies to the browser and profile in which it was made. A separate browser, private browsing session or device may require another choice. Shared devices can contain a preference selected by another user, so the most recent user can use the permanent Cookie settings control in the footer to update it.
6. Changing or withdrawing consent
Consent can be withdrawn at any time by selecting “Cookie settings” in the footer, switching Analytics off and saving the preference. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal, but it prevents new Analytics loading on later page views in that browser. The tool also disables the measurement property for the current page and attempts to expire relevant first-party Analytics cookies.
A visitor may additionally clear cookies and local storage through browser settings. Clearing the consent record means the website will request a new choice during the next visit. Browser controls can block all cookies or scripts, but broad blocking may affect language preferences, authentication or functions requested in the signed-in product. The public informational pages remain usable when optional analytics is rejected.
7. Legal basis and applicable rules
For optional storage and access, we rely on consent under the Privacy and Electronic Communications Regulations and, where personal data is processed, consent under applicable data protection law. Consent must be freely given, specific, informed and unambiguous. Essential storage is used only where necessary to remember a requested privacy or language setting, protect a service, or provide another function requested by the user. Any separate processing of security logs is based on our legitimate interests in protecting the website and service, not on the Analytics consent choice.
Rejecting analytics does not prevent ordinary server requests from reaching our hosting infrastructure. Like most internet services, the server may record technical requests for security, reliability, abuse prevention and incident investigation. Those operational logs are not Analytics cookies and are addressed in the Privacy Policy.
8. Information received by third parties
If Analytics is accepted, Google may receive information generated by the browser and process it to provide the measurement service. Google acts under its own contractual and data protection arrangements, which may involve infrastructure in several countries. OVERXXI assesses its providers and uses available contractual safeguards where required for international transfers. Visitors should review Google’s public privacy and Analytics information for further details about its current systems.
Links to third-party websites do not automatically mean those parties receive an OVERXXI cookie choice. When a visitor follows an external link, the destination is responsible for its own cookies and privacy information. Embedded services will be assessed before being added; optional embedded tracking should not load without the relevant permission.
9. Retention and consent records
The local consent record is retained in the browser until it is cleared, replaced or invalidated by a policy-version change. We use a version value so a material change can trigger a new choice. Analytics retention within Google’s systems is configured and reviewed according to operational need, contractual capability and applicable law. Aggregated reports may remain useful after individual identifiers expire, provided they no longer identify a visitor.
Security and web server logs have separate retention controls. They may be retained long enough to investigate malicious traffic, maintain service integrity, establish legal claims or meet documented backup cycles. We do not treat a list of automated vulnerability probes as a marketing audience, and we do not combine rejected Analytics activity with advertising profiles.
10. Children and sensitive information
The public website and OVERXXI Gate Pro are intended for businesses and professional users, not children. Visitors should not submit special-category data, passwords, payment card details or confidential project information through public analytics or ordinary contact messages. Analytics is intended to measure use of public content, not to collect health, biometric, political, religious or similarly sensitive information.
If we become aware that an optional measurement configuration is collecting information beyond its stated purpose, we will investigate, restrict the collection and update the configuration or policy as appropriate.
11. Browser signals and technical limitations
Browser privacy controls, content blockers and corporate security tools may stop Analytics even after it is accepted. That is acceptable; the website does not attempt to circumvent those controls. Conversely, deleting only an Analytics cookie without updating the consent preference may allow the Analytics script to create another cookie on a later page view. To withdraw permission reliably, use Cookie settings as well as any preferred browser controls.
No consent platform can govern cookies placed independently by another website, browser extension, network intermediary or malicious software. This policy describes technologies under OVERXXI’s control on its own website.
12. Changes to this policy
We review this policy when we change analytics providers, introduce a new storage purpose, materially alter retention, add an embedded service or receive updated regulatory guidance. Minor wording corrections may not require renewed consent. A material change to optional purposes or providers may result in a new policy version and another consent request. The effective date at the top identifies the current published version.
Historical technical behaviour cannot be changed retrospectively, but future collection will follow the active choice and current implementation. We maintain deployment and audit records so we can verify that the public pages call the consent manager rather than loading Analytics directly.
13. Contact and rights
For questions, objections or requests relating to cookies and associated personal data, contact privacy@overxxi.com. Provide the browser, approximate date and nature of the issue without sending secrets. Depending on applicable law, a person may have rights of access, correction, erasure, restriction, objection, portability and withdrawal of consent. We may need to verify identity before disclosing information.
You may also raise a concern with the UK Information Commissioner’s Office. We encourage contacting us first so we can investigate promptly, but doing so does not remove the right to approach the regulator. Further details about rights, lawful bases, disclosures and international transfers are provided in the Privacy Policy.