Cookie Policy — KeystoneTelX

1. Overview

This Cookie Policy explains how KeystoneTelX(“KeystoneTelX,” “we,” “our,” or “us”) uses cookies and similar technologies when you visit keystonetelx.com (the “Site”) or sign in to our client portal or admin console.

The Site and the Services are intended for businesses located in the United States. If we expand outside the United States we will update this policy first.

This Cookie Policy is one of three documents that together govern your use of the Services. It should be read alongside our Privacy Policy (which describes how we handle personal information more broadly) and our Terms of Service (which sets the contractual terms for using the Site and the portals). If anything in this policy conflicts with the Privacy Policy, the Privacy Policy governs.

2. What cookies are

Cookies are small text files that a website places on your browser when you visit it. They let the site remember things between page loads — for example, that you are signed in. Similar technologies (local storage, session storage, pixels) do comparable jobs and are covered by this policy where we use them.

A cookie can be:

First-party — set by keystonetelx.com; or third-party — set by another domain we embed, such as accounts.google.com during Sign in with Google.
Session — deleted when you close your browser; or persistent — kept for a defined period, then deleted automatically.

3. How we use cookies

Today we use cookies for one purpose only: to keep you signed in and to keep your session secure. We do not run ad-tech, retargeting, or third-party analytics on this site at this time. If that changes, we will update this page before turning anything on, and — where the law requires it — ask for your consent first.

4. Categories of cookies

Industry practice (and most consent banners) group cookies into four categories. Here is where KeystoneTelX stands today:

Category	What it does	KeystoneTelX uses it?
Strictly necessary	Authentication, CSRF protection, OAuth security, load-balancing.	Yes
Functional / preferences	Remember UI settings such as language, theme or “remember me”.	No
Analytics / performance	Aggregate page views, error monitoring, A/B tests.	No
Marketing / advertising	Retargeting, conversion pixels, ad personalization.	No

5. Cookies we set

The table below is the canonical list of cookies set by keystonetelx.com. We will update it as the list changes.

Name	Provider	Purpose	Category	Duration
`authjs.session-token`	keystonetelx.com	Stores your authenticated session as an encrypted JSON Web Token. Required to keep you signed in to the client portal or admin console.	Strictly necessary	1 hour, sliding (renews on activity)
`authjs.csrf-token`	keystonetelx.com	Cross-site request forgery (CSRF) protection on sign-in, sign-out and OAuth flows.	Strictly necessary	Browser session
`authjs.callback-url`	keystonetelx.com	Remembers which page you were trying to reach so we can send you back there after sign-in.	Strictly necessary	Browser session
`authjs.pkce.code_verifier`	keystonetelx.com	Implements the PKCE security extension during OAuth sign-in (Sign in with Google).	Strictly necessary	15 minutes
`authjs.state`	keystonetelx.com	Holds the OAuth `state` parameter to prevent cross-site request forgery during third-party sign-in.	Strictly necessary	15 minutes
`authjs.nonce`	keystonetelx.com	Holds the OpenID Connect `nonce` to prevent token replay during third-party sign-in.	Strictly necessary	15 minutes

Note: in production the names above are prefixed with __Secure- because they are served over HTTPS. The purpose of each cookie is unchanged.

6. Third parties that may set cookies

When you choose Sign in with Google, your browser is briefly redirected to Google to verify your identity. While you are on Google’s domain, Google may set or read its own cookies on accounts.google.com under its own privacy policy. KeystoneTelX does not control those cookies and cannot read them.

Google Account & Sign in with Google — Google’s cookie policy.

Our hosting provider (Vercel) and database provider (Neon) do not set cookies on your browser as part of normal site operation.

7. How to control cookies

Because we currently set only strictly necessary cookies, there is nothing for you to consent to or opt out of on this site. You can still control cookies at the browser level at any time:

Be aware: blocking the strictly necessary cookies above will prevent you from signing in to the client portal or admin console.

8. Do Not Track and Global Privacy Control

We honor the Global Privacy Control (GPC) signal where it has legal effect (notably California under the CCPA/CPRA). Because we do not currently sell or share personal information for cross-context behavioral advertising, the GPC signal does not change what we do — but if that ever changes, we will already be respecting it.

We do not respond to legacy Do Not Track (DNT) browser signals because the standard was never finalized and most browsers no longer maintain it.

9. Children

KeystoneTelXis a business-to-business service. The Site is not directed to children under 13 (the threshold under the United States Children’s Online Privacy Protection Act), and we do not knowingly set cookies on devices used by children.

10. Changes to this policy

We may update this Cookie Policy from time to time — for example, when we add a new tool that sets cookies, or when the applicable law changes. The “Last updated” date at the top of this page will reflect the most recent change. If a change is material — such as introducing analytics or marketing cookies — we will surface it more prominently (for example, via a consent banner) before the change takes effect.

11. Contact us

Questions about this Cookie Policy, or about how we handle your information generally, should be directed to:

privacy@keystonetelx.com
KeystoneTelX
United States

Cookie Policy.