Cookie Policy

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, provide functionality, and give site owners information about how their service is used.

Similar technologies include web beacons, pixel tags, and local storage — all of which are covered by this Cookie Policy.

LexAI uses cookies for the following purposes:

Strictly necessary cookies. These cookies are essential for the Service to function. They enable core features such as authentication sessions, security tokens, and preference storage. You cannot opt out of these cookies without losing access to the Service.

Functional cookies. These remember your preferences such as sidebar collapsed state, theme settings, and recently viewed contracts.

Analytics cookies. We use privacy-respecting analytics to understand how users interact with the Service. This helps us improve features and fix bugs. We do not use Google Analytics or third-party advertising trackers.

Security cookies. Used to detect and prevent CSRF attacks, session hijacking, and other security threats.

sb-auth-token — Supabase authentication session token. Strictly necessary. Duration: session.

sb-refresh-token — Supabase authentication refresh token. Strictly necessary. Duration: 7 days.

lexai-theme — Your selected theme preference (light/dark). Functional. Duration: 1 year.

lexai-sidebar-state — Whether the sidebar is collapsed or expanded. Functional. Duration: 1 year.

lexai-csrf — Cross-site request forgery prevention token. Security. Duration: session.

When you make a payment, Stripe.com may set cookies on your device for fraud prevention and security purposes. These are governed by Stripe's Privacy Policy.

We do not permit third-party advertising networks to place cookies on our Service.

Browser controls. Most browsers allow you to refuse cookies or delete existing ones. See your browser's help documentation for instructions. Note that disabling strictly necessary cookies will prevent you from logging in to the Service.

Do Not Track. Some browsers send "Do Not Track" signals. We respect this signal for analytics cookies.

Consent management. Where required by law (e.g., GDPR), we will present a consent banner allowing you to manage non-essential cookies.

In addition to cookies, we use HTML5 local storage to persist small pieces of UI state (such as draft content, recent searches, and display preferences) directly in your browser. This data stays on your device and is not transmitted to our servers.

We may update this Cookie Policy to reflect changes in our practices or applicable law. We will notify you of material changes by updating the "Last updated" date at the top of this page.

For questions about our use of cookies, contact us at privacy@lexai.app.