Cookies.
Only what we need.
Most of the internet is watched more than it is read. This site tries to be different — we use the smallest possible number of cookies, only for reasons you would recognise, and always in a way you can control.
1. What is a cookie?
A cookie is a small text file that a website places on your device to remember something about your visit. Related technologies covered by this policy include local storage, session storage, IndexedDB, pixel tags, and device fingerprints. We refer to all of these collectively as “cookies”.
2. Categories we use
We group cookies into three simple categories — these map to the standard framework used by data-protection authorities in the EU, UK, and India:
- Strictly necessary — the site does not work without them. These handle authentication, security, session state, and load balancing. We rely on our legitimate interest and, under the ePrivacy Directive, the “strictly necessary” exemption (Art. 5(3)) to set them without consent.
- Preferences (functional) — remember choices you have made (e.g. sound-on, day/night look, language). Consent-based in regions where required.
- Analytics (aggregated) — help us understand which pages are being used and where the site is broken. Never used to build advertising profiles, never sold, never shared for cross-context behavioural advertising. Consent-based in regions where required.
We do not use marketing, advertising, or ad-tech cookies. If we ever introduce one, we will update this policy and give you an unambiguous consent moment before we set it.
3. Cookies actually in use on this website
| Name | Purpose | Category | Provider | Retention |
|---|---|---|---|---|
| ns_session | Maintains your logged-in state on the team sign-in area (admin.nxtspacelabs.com). | Strictly necessary | NextSpace Labs (first-party) | Session |
| ns_pref | Remembers UI preferences (sound-on, reduced motion, day/night look). | Preferences | NextSpace Labs (first-party) | 12 months |
| _vercel_insights, _vercel_speed | Anonymous, aggregated Web Vitals + Core Web-Vitals telemetry. No cross-site identifier. | Analytics | Vercel (Vercel Analytics / Speed Insights — GDPR-compliant, no personal identifiers) | Up to 6 months (aggregated) |
| fonts.gstatic.com | Google Fonts CDN delivery of Fraunces, Instrument Serif, Inter, and JetBrains Mono. | Strictly necessary | Google Ireland Limited | Browser-managed |
4. Our products may set additional cookies
If you use one of our products, that product may set its own cookies (or the equivalent on mobile) for its own operation. Each product’s cookies are documented within the product’s own settings and privacy pages, together with any provider-specific opt-outs.
5. Legal basis
We rely on the following legal bases:
- Strictly necessary cookies — ePrivacy Art. 5(3) exemption, IT Act 2000 s. 43A / DPDP Act 2023 legitimate use for the purpose of providing the requested Service.
- Preferences and analytics cookies in the EEA, UK, Switzerland, and any other jurisdiction that requires it — your prior, informed consent, refreshed every 12 months.
- United States residents — we do not sell or share personal information within the meaning of CCPA/CPRA. You can still submit a “Do Not Sell or Share My Personal Information” request at connect@nxtspacelabs.com.
6. Your choices
You can accept, decline, or delete cookies at any time:
- Consent banner — where required, we will show a banner on first visit that lets you accept or reject non-essential cookies. Your choice is remembered.
- Browser settings — every modern browser allows you to block cookies globally or per site. Instructions: Chrome, Firefox, Safari, Edge.
- Preferences — declining preference or analytics cookies will not break the site.
- Strictly necessary cookies cannot be turned off without breaking sign-in and other core features.
- Global Privacy Control (GPC) — where your browser sends a GPC signal, we treat it as a valid opt-out of any sale or share within the meaning of CCPA/CPRA.
- Do Not Track (DNT) — we honour DNT to the extent that we do not use tracking cookies for cross-context behavioural advertising in any event.
7. Third parties & sub-processors
Where we use third parties to deliver a feature (Google Fonts, Vercel Analytics), those third parties act as processors under our written contracts and their own privacy policies. We do not sell or share your data for advertising purposes. A current list of our material sub-processors is available on request at connect@nxtspacelabs.com.
8. International transfers
Where a cookie provider is outside your country of residence, we rely on the safeguards set out in section 7 of our Privacy Policy, including EU Standard Contractual Clauses and the UK IDTA.
9. Changes to this policy
When we add or remove a cookie, we update this page and refresh the “Effective” date at the top. Where the change is material we will re-prompt for consent where required by law.
10. Questions
Write to us at connect@nxtspacelabs.com. Our Grievance Officer / DPO responds personally, and we aim to reply promptly and in line with the timelines applicable to your matter under law.
Version history
- Version 1.0 — effective 4 July 2026 — first publication (strictly necessary + preferences + analytics only; GPC & DNT honoured).
- 8 July 2026 — removed the hCaptcha cookie-table row — the contact form no longer uses a CAPTCHA provider, so no hcaptcha / hcaptcha-state cookies are ever set.
A quiet page for a quiet promise: your visit here is not a resource we harvest.