Privacy

Demo policy for a fictional store. A real business must have this text reviewed before launch.

This page lists exactly what this application stores, based on its database schema.

Accounts

• Name and email address.
• A salted password hash (never the password itself).
• Sessions: an opaque token, expiry, IP address and browser user agent, so you can be signed out.
• Saved addresses you choose to add.

Orders

Email, shipping address, optional phone number, the items, prices and totals at the time of purchase, and the Stripe session identifier. Card details are entered on Stripe's page and never reach NEXORA.

Cookies and local storage

• nx.session_token (or __Secure- prefixed in production): keeps you signed in. Strictly necessary.
• nx_cart: identifies a guest cart for 30 days. Strictly necessary.
• nx:recently-viewed in your browser's local storage: product ids you viewed, never sent to the server except to show that list to you.

There are no analytics, advertising or third-party tracking scripts, so no consent banner is needed.

Newsletter

If you subscribe, your email address is stored until you unsubscribe.