How the Nexus consent model works
Strictly necessary technologies operate without optional consent because they are required to provide a service you explicitly request, such as secure sign-in, or to remember your expressed privacy choice. Optional categories are off by default.
“Reject optional” and “Accept all” are available at the same level. “Customize choices” provides category controls. Refusing optional technologies does not block access to the public website. You can reopen the controls through “Cookie settings” in the footer.
Your decision is stored for 180 days. Nexus then asks again, or asks sooner if the consent model materially changes.
Technologies currently active
The following inventory reflects the code currently used by this website. A cookie may not appear until you use the related function.
| Name | Type / provider | Purpose | Duration / category |
|---|---|---|---|
| nexus_member_session / __Host-nexus_member_session | First-party, HTTP-only cookie / Nexus | Carries an opaque signed identifier for a revocable server-side member session. It contains no profile or role data and is not readable by client-side JavaScript. | Up to 7 days · Strictly necessary |
| nexus_admin_session / __Host-nexus_admin_session | First-party, HTTP-only cookie / Nexus | Carries an independently signed administrator session identifier. Member sessions are never accepted by the administration API. | Up to 12 hours · Strictly necessary |
| nexus_member_oauth_state, nexus_admin_oauth_state and __Host- production variants | First-party, HTTP-only cookie / Nexus | Protects the selected member or administrator Google sign-in redirect against request forgery and validates the returning authentication attempt. | Up to 10 minutes · Strictly necessary |
| nexus_member_oauth_verifier, nexus_admin_oauth_verifier and __Host- production variants | First-party, HTTP-only cookie / Nexus | Stores the one-time PKCE verifier bound to the Google authorization attempt. | Up to 10 minutes · Strictly necessary |
| nexus_member_oauth_registration / __Host-nexus_member_oauth_registration | First-party, HTTP-only cookie / Nexus | Remembers an explicit member registration request, cryptographically bound to the same Google sign-in attempt. It cannot authorize administrator registration. | Up to 10 minutes · Strictly necessary |
| nexus_member_two_factor, nexus_admin_two_factor and __Host- production variants | First-party, HTTP-only cookie / Nexus | Carries a portal-bound opaque identifier for the temporary 2FA recommendation or verification step. It cannot access either workspace. An unenrolled account may explicitly skip setup; an enrolled account must verify before a session is issued. | Up to 10 minutes · Strictly necessary |
| nexus_cookie_preferences_v1 | First-party local storage / Nexus | Records consent version, allowed categories, type of decision and decision/expiry times so the banner respects your choice. | 180 days · Strictly necessary |
Optional categories
Analytics would be used to understand aggregated visits, navigation and website performance. Marketing would be used for advertising measurement, attribution or personalization. Neither category currently loads a provider or tracker on this website.
Selecting an optional category records your preference but does not itself create analytics or marketing tracking. If a provider is introduced, Nexus must update this notice and inventory, change the consent version and ask again before that technology is activated. A previous general category choice is not reused for a newly introduced provider.
| Category | Default | Current status |
|---|---|---|
| Analytics | Off | No analytics provider deployed |
| Marketing | Off | No marketing provider deployed |
Change or withdraw your choice
Use the “Cookie settings” control in the website footer or the persistent privacy control after you make a decision. Turning off a category withdraws consent for future use. It does not affect processing that was lawful before withdrawal.
You can also remove website data through your browser settings. Removing the applicable nexus_member_session or nexus_admin_session cookie signs you out of that portal. Removing the privacy preference causes the site to ask for your choice again.
Browser and device controls
Most browsers let you view, block or delete cookies and site data. Blocking all storage may prevent secure sign-in and may cause the privacy notice to reappear because the browser cannot remember your choice.
Browser-level “Do Not Track” signals do not have one universally agreed technical meaning. Nexus instead uses the explicit category choices shown in the consent interface.
Updates and contact
We review this notice when technologies or providers change. Questions about this inventory or privacy choices may be sent to contacts@nexus-soft.org with “Cookie question” in the subject line.