All legal documents

Legal

Cookie Policy

Last updated: 2026-06-29

This Cookie Policy explains how Resonix Labs (Canada) Inc. ("Resonix") uses cookies and similar technologies on our websites (the "Site"). It supplements our Privacy Policy (01).

1. What are cookies?

Cookies are small text files stored on your device. "Similar technologies" include local storage and pixels. We use both first-party (set by us) and third-party (set by service providers) technologies.

2. Cookies we use

Name / itemTypePurposeSet byDuration
resx_sessionStrictly necessaryKeeps you signed in to the investor area/data room (signed JWT, HS256; HttpOnly, Secure in production, SameSite=Lax, Path=/)Resonix (first-party)7 days
resx_consentStrictly necessaryRemembers your choice on the cookie banner so we don't ask again during your visit (SameSite=Lax, Path=/)Resonix (first-party)Session — cleared when you close your browser
Theme preference (theme)FunctionalRemembers light/dark theme (next-themes)Resonix (first-party)Stored in browser localStorage, not a cookie — persists until you clear site data
Vercel AnalyticsAnalytics/PerformanceAggregate, privacy-friendly traffic measurementVercelCookieless — sets no cookies in our configuration
Vercel Speed InsightsAnalytics/PerformancePage performance metrics (Core Web Vitals)VercelCookieless — sets no cookies in our configuration

We do not use advertising or cross-site tracking cookies.

Note on cookieless analytics & localStorage. Because Vercel Analytics and Speed Insights are cookieless and the theme preference uses localStorage, no consent is required for them on a strict cookie-law reading. However, EU ePrivacy/GDPR treats localStorage and analytics as "similar technologies," so a broader "tracking" reading may still call for consent for EU/UK users — see §3. The only cookie we set is the strictly-necessary resx_session.

3. Legal basis & consent

  • Strictly necessary cookies (e.g., resx_session) do not require consent — the Site cannot function securely without them.
  • Functional and analytics technologies: where required by law (e.g., for users in the EU/UK), we will use non-essential cookies/analytics only with your consent, obtained via a consent banner/preference tool. In Canada, PIPEDA-appropriate consent (express or implied) applies.

4. Managing cookies

You can control or delete cookies through your browser settings, and you can opt out of non-essential cookies via our consent tool (once implemented). Blocking strictly-necessary cookies may break sign-in and the data room.

Global Privacy Control (GPC) & Do Not Track (DNT). We honor GPC browser signals: because we do not sell or share personal information, a GPC signal is treated as a valid opt-out of any future sale/sharing and, once our consent tool is live, as an opt-out of non-essential analytics. "Do Not Track" (DNT) is not a standardized signal; we do not respond to DNT separately but apply the GPC treatment above.

5. Third parties

Third-party providers (e.g., Vercel) process data under their own privacy terms; see our Privacy Policy (01) and DPA (08) for the list of providers and roles.

6. Changes & contact

We may update this Policy; the "Last updated" date shows the latest version. Questions: privacy@resonixlabs.io / hello@resonixlabs.io.