Effective date: 2026-09-24
Cookie Policy
Codex Titan is operated by RB ZILLA LLC ("we," "us," or "our"). This Cookie Policy explains how we use cookies and similar tracking technologies on https://www.codextitan.com (the "Site") and, where noted, on related Codex Titan surfaces (admin dashboard and portal). For our full data practices, including how we collect, use, and share personal information, please refer to our Privacy Policy.
1. What Are Cookies
Cookies are small text files that a website places on your device (computer, tablet, or phone) when you visit. They allow the site to remember information about your visit — such as your login session or preferences — across page loads and return visits.
Local storage is a browser-based mechanism that stores key-value data on your device without an expiration date, functioning similarly to cookies but not transmitted with every HTTP request. Pixels (also called tracking pixels or web beacons) are tiny, invisible images embedded in a page or email that fire an HTTP request to a server when loaded, allowing the sender to confirm delivery, record a page view, or associate an action with a user profile.
Together, these technologies help us operate the Site securely, understand how it is used, and measure the effectiveness of our communications.
2. How We Use Cookies
Security and Authentication. We use strictly necessary cookies to establish and maintain authenticated sessions on Codex Titan support portals. These cookies verify your identity on each request, protect against cross-site request forgery, and enforce session timeouts. Without them, you cannot sign in to a support portal.
Analytics. We use analytics cookies and similar technologies to understand how visitors use the Site and our product surfaces — which pages are visited, how long sessions last, and where users encounter friction — and we use this data to improve the platform. On the marketing Site, we use Google Analytics 4, loaded directly on the page. On the admin dashboard, we use PostHog. On the support portal, we count usage ourselves without setting cookies. PostHog is not used on the marketing Site or the support portal. Analytics follows the regional rules in Section 5: in the United States it is on by default until you opt out, everywhere else it runs only after you accept, and it never runs when your browser sends a Global Privacy Control signal. We do not use analytics data to build individual behavioral profiles for advertising purposes.
Payment Processing. We use cookies set by Stripe to support secure payment flows. Stripe's script loads on every admin dashboard page, including sign-in, and sets these cookies for fraud detection and transaction integrity. We do not use payment cookies for advertising or cross-site tracking.
Marketing and Conversion Measurement. Our consent banner includes a Marketing category for measuring advertising campaigns — whether an ad click led to a visit or conversion. No advertising or conversion-measurement tags currently run on the Site, the admin dashboard, or the support portal, so no marketing cookies are set, whatever you choose. The Marketing category is off by default in every region. We do not use cookies for retargeting, cross-site behavioral profiling, or building advertising profiles. If we introduce conversion measurement, we will update this policy first and set marketing cookies only with your consent.
3. Cookie Categories
3.1 Strictly Necessary
These cookies are essential for the Site and platform to operate. They cannot be disabled. No consent is required to set them.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
cc_cookie |
Codex Titan (RB ZILLA LLC) | Stores your cookie consent choice so the banner is not shown on every visit. The Site, the admin dashboard, and each support portal store their own choice | 366 days. A choice stored on or before September 24, 2026 may instead expire after 182 days. Safari may limit this cookie to 7 days, after which you will be asked again; in the United States, analytics resumes by default until you opt out again. |
ct_portal_session |
Codex Titan (RB ZILLA LLC) | Keeps you signed in to a support portal. Set only when you sign in | 24 hours |
ct_portal_email |
Codex Titan (RB ZILLA LLC) | Holds your email address so the portal can show who is signed in. Set only when you sign in | 24 hours |
ct_portal_csrf |
Codex Titan (RB ZILLA LLC) | Security — protects signed-in portal requests against cross-site request forgery. Set only when you sign in | 24 hours |
__cf_bm |
Cloudflare | Bot management — distinguishes human visitors from automated traffic to protect the Site. Set only when Cloudflare's bot protection applies to a request | 30 minutes |
cf_clearance |
Cloudflare | Records that a browser has passed a Cloudflare security challenge, preventing repeated challenges. Set only after a challenge is shown | Session |
__stripe_mid |
Stripe | Fraud prevention — identifies the device across payment sessions to detect anomalous activity. Set when Stripe's script loads on the admin dashboard | 1 year |
__stripe_sid |
Stripe | Fraud prevention — identifies the browser session. Set when Stripe's script loads on the admin dashboard | 30 minutes |
m (on m.stripe.com) |
Stripe | Fraud prevention — set on Stripe's own domain when Stripe's script loads on the admin dashboard | 2 years (Chrome limits it to 400 days) |
_GRECAPTCHA (on www.google.com) |
Google (reCAPTCHA Enterprise, used through Firebase App Check) | Security — helps confirm that requests from the admin dashboard come from a real browser rather than an automated script. reCAPTCHA also stores a _grecaptcha value in your browser's local storage |
180 days |
Note on Sentry (admin dashboard — core error monitoring): On the admin dashboard, core Sentry error monitoring and performance tracing load as strictly necessary for service reliability, whatever your cookie choice. Core monitoring also sends warnings and errors written to the browser console. Sentry is configured with
sendDefaultPii: falseand does not set cookies by default; it transmits data via HTTP headers and JavaScript SDK calls only. Session replay is not strictly necessary: it runs only on the admin dashboard, and only after you accept every category (Accept All) — see Section 3.2. The support portal does not currently use Sentry.
3.2 Analytics Cookies
These cookies and similar technologies help us understand how visitors use the Site and our product surfaces. In the United States they are on by default until you opt out; everywhere else they are set only after you accept; and they are never set when your browser sends a Global Privacy Control signal (see Sections 5 and 6).
| Cookie Name / Tech | Provider | Purpose | Duration | Surface |
|---|---|---|---|---|
_ga |
Google Analytics | Distinguishes unique users by assigning a randomly generated client ID | 2 years (Chrome limits it to 400 days) | Marketing Site |
_ga_<measurement-id> (for example, _ga_VP7KFGJ6F3) |
Google Analytics | Persists session state for Google Analytics 4 (GA4) | 2 years (Chrome limits it to 400 days) | Marketing Site |
| Sentry browser SDK (no cookies by default) | Sentry | Error monitoring and performance tracing on the marketing Site (sendDefaultPii: false; no session replay on the marketing Site) |
N/A (HTTP / SDK) | Marketing Site (Analytics category) |
ph_<project key>_posthog cookie (sent to all codextitan.com sites; only the admin dashboard reads it) and local storage entry; __ph_opt_in_out_<project key> local storage; ph_* session storage |
PostHog | Identifies the browser and session for product analytics and, after Accept All, session recording. __ph_opt_in_out_<project key> records whether PostHog analytics is allowed. Nothing is stored until analytics is allowed. Opting out deletes the cookie and the ph_<project key>_posthog local storage entry, and keeps the record of your opt-out |
Cookie: 1 year. Local storage: the ph_<project key>_posthog entry until you opt out or clear site data; the __ph_opt_in_out_<project key> record until you sign out of the admin dashboard or clear site data. Session storage: until the browser tab is closed |
Admin dashboard only |
| Sentry Session Replay (no cookies by default) | Sentry | Masked session replay for error diagnosis (maskAllText: true, blockAllMedia: true); starts only after Accept All |
N/A (HTTP / SDK) | Admin dashboard only |
| Portal usage analytics (no cookies or browser storage) | Codex Titan (RB ZILLA LLC) | Counts how the support portal is used: monthly page views, the text of up to 100 different searches a month (including searches made only once), article and FAQ opens, support-form starts and submissions, and a short code derived from your IP address and the date to count unique visitors | N/A (no cookie) | Support portal |
Note on dashboard session recordings: PostHog session recording and Sentry Session Replay start only after you accept every cookie category (for example, by clicking Accept All), and never when your browser sends a Global Privacy Control signal. Accepting analytics alone does not start them. Both mask all text and media in your browser before transmission. PostHog recordings capture the URLs and timings of network requests, but not request or response contents, and no console output. Sentry Session Replay can also include the URLs and timings of network requests (not their contents) and messages written to the browser console.
Note on the support portal: The portal sends usage events to our servers only when your cookie choice allows analytics. It receives the referring page with each page view but does not store it. Separately, each help article keeps a running total of how many times it has been opened, which records nothing about who opened it.
3.3 Marketing Cookies
Marketing cookies would be used to measure the effectiveness of advertising campaigns on the Codex Titan marketing website (www.codextitan.com). They would be set only with your consent. The consent banner includes this category on the Site, the admin dashboard, and the support portal, and it is off by default in every region.
No marketing cookies are currently set. No advertising or conversion-measurement tags run on the Site, the admin dashboard, or the support portal, so accepting this category currently has no effect. If we introduce conversion measurement, we will update this policy before any marketing cookie is set.
3.4 Functional Cookies
Functional cookies enable enhanced features and personalization beyond the basic operation of the Site. They are set only with your consent.
No functional cookies are currently set. This category is reserved for future enhanced functionality features such as language preferences or customized interface settings. When functional cookies are introduced, this section will be updated and the consent banner revision will be incremented.
4. Third-Party Cookies and Services
The following third-party providers may set cookies or process data in connection with your use of the Site. Each provider operates under its own privacy and cookie policy.
| Provider | Role | Cookies Set | Privacy / Cookie Policy |
|---|---|---|---|
| Google Analytics | Web analytics — measures traffic, user behavior, and engagement on the marketing Site (Google Analytics 4, loaded directly on the page) | _ga, _ga_<measurement-id> |
policies.google.com/privacy |
| PostHog | Product analytics and session recording on the admin dashboard only (not the marketing Site or the support portal) | ph_* (dashboard) |
posthog.com/privacy |
| Stripe | Payment processing — handles checkout, subscription billing, and fraud detection | __stripe_mid, __stripe_sid, m (on m.stripe.com) |
stripe.com/privacy |
| Cloudflare | CDN, DDoS protection, and bot management — serves and protects all Site traffic at the network edge | __cf_bm, cf_clearance |
cloudflare.com/privacypolicy |
| Sentry | Error monitoring: marketing Site (Analytics category, no replay); admin dashboard core SDK, including browser console warnings and errors (strictly necessary); masked session replay on the admin dashboard only, after Accept All. The support portal does not currently use Sentry | None (uses HTTP headers and SDK only) | sentry.io/privacy |
| Resend | Transactional email delivery — sends account notifications, receipts, and support communications | None (may use tracking pixels / link wrapping in emails; see below) | resend.com/privacy |
| Anthropic | AI inference — powers the AI-assisted support response features of the Codex Titan API | None | anthropic.com/privacy |
| Google Cloud / Firebase | Cloud infrastructure and backend services — hosts application data and provides authentication services; reCAPTCHA Enterprise, through Firebase App Check, protects the admin dashboard from automated abuse | _GRECAPTCHA (on www.google.com, admin dashboard) |
cloud.google.com/privacy |
Note on Resend / email engagement: Support-ticket reply emails may include a first-party open-tracking pixel (when a Client enables it) that records only that the message was opened and the open timestamp. Separate account recovery / lifecycle emails may use Resend open and click tracking; Resend may process technical data (such as IP address) when those pixels load or tracked links are clicked. You can limit open tracking by blocking remote images in your email client. See our Privacy Policy §2.10 for details.
5. Consent Mechanism
We use a cookie consent banner on the Site, the admin dashboard, and the support portal to obtain and record your preferences. The same rules apply on all three.
How the banner works:
- Visitors outside the United States (opt-in mode): Everywhere outside the United States — including the European Economic Area, the United Kingdom, and any location we cannot identify — all non-essential cookies and similar technologies (analytics, marketing, and functional) are off by default. The banner appears, and nothing non-essential runs until you click Accept All or switch a category on under Manage Preferences. If you close the banner without making a selection, non-essential cookies stay off.
- Visitors in the United States (opt-out mode): Analytics is on by default; marketing and functional cookies stay off. The banner appears, and you can click Opt Out at any time to switch analytics off. Strictly necessary cookies are always active regardless of your choice.
- Global Privacy Control: If your browser sends a Global Privacy Control signal, all non-essential cookies stay off in every region and the banner is not shown (see Section 6).
How we determine your region: On the Site, we use the country that Cloudflare, our network provider, detects for your connection. If Cloudflare cannot identify a country, you are treated as outside the United States. We use your browser's time zone only if a page reaches you without that country information. On the admin dashboard and the support portal, we use your browser's time zone. Only a United States time zone or a United States connection places you in opt-out mode.
Banner options:
| Option | Effect |
|---|---|
| Accept All | Enables all cookie categories. On the admin dashboard, accepting every category also allows masked session recordings (see Section 3.2). |
| Reject All / Opt Out | Disables all non-essential cookies and similar technologies; only strictly necessary cookies are set |
| Manage Preferences | Opens a panel where you can enable or disable individual categories |
The Accept All and Reject All / Opt Out buttons are displayed with equal visual prominence. We do not use dark patterns or misleading language to nudge you toward accepting cookies. Outside the United States, no optional category is switched on before you choose. In the United States, the Analytics toggle starts switched on, as described above.
Updating your preferences: You can change your cookie preferences at any time using the Consent Preferences or Do Not Sell or Share control in the footer of the Site or the support portal, or in the admin dashboard menu after you sign in. Each site stores its own choice. Your choice is stored in the cc_cookie cookie for at least 12 months (366 days), after which the banner will reappear. A choice stored on or before September 24, 2026 may instead expire after 182 days. Safari may limit this cookie to 7 days, after which you will be asked again; in the United States, analytics resumes by default until you opt out again.
Earlier choices: Because we updated our banner in September 2026, you may be asked for your choice again. If you refused analytics under the earlier banner, that refusal still applies until you answer the new one, for as long as the earlier choice remains stored on your device.
Withdrawing consent: You may withdraw consent at any time by clicking Reject All in the preference panel. When you do, analytics stops and its cookies are cleared (_ga cookies on the Site, ph_ cookies on the admin dashboard). Withdrawing consent does not affect the lawfulness of any processing that occurred before you withdrew it.
6. Global Privacy Control (GPC)
We honor the Global Privacy Control (GPC) signal as a valid opt-out of all non-essential tracking, including both analytics and any future marketing cookies, in every region and on the Site, the admin dashboard, and the support portal.
How we detect GPC:
- Server-side (Site): On the Site, our edge server reads the
Sec-GPC: 1HTTP request header transmitted by your browser. - Client-side (all surfaces): On the Site, the admin dashboard, and the support portal, we check the
navigator.globalPrivacyControl === trueJavaScript property on page load.
Either signal is enough on its own.
What happens when GPC is detected: When a GPC signal is detected, analytics and all non-essential cookies are automatically declined without displaying the consent banner. You will not be prompted to make a cookie choice, no non-essential cookies will be set for the duration of your visit, and dashboard session recordings do not start. We record that the choice was declined because of the signal.
Mandated US states. GPC opt-out is legally required under applicable privacy law for residents of the following states: California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, and Texas. If you are a resident of one of these states, your GPC signal is processed as a formal opt-out under applicable state privacy law.
7. Do Not Track (DNT)
We do not honor the Do Not Track (DNT) browser signal. DNT has no universally accepted technical standard, no consistent compliance definition across jurisdictions, and no established legal enforcement mechanism. As a result, there is no reliable or uniform way to implement it.
If you wish to opt out of non-essential tracking, we recommend using Global Privacy Control (GPC) (see Section 6), which is a standardized, legally recognized signal supported by an increasing number of US state privacy laws.
8. Managing Cookies in Your Browser
You can control or delete cookies directly through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to the Codex Titan platform — authenticated sessions cannot be maintained without them.
Google Chrome: Go to Settings > Privacy and security > Cookies and other site data. You can block all cookies, block third-party cookies only, or clear existing cookies. You can also add site-specific exceptions.
Mozilla Firefox: Go to Settings > Privacy & Security > Cookies and Site Data. Firefox's Enhanced Tracking Protection can be set to Standard, Strict, or Custom. You can clear cookies for individual sites under Manage Data.
Apple Safari: Go to Settings > Safari > Privacy & Security (iOS) or Safari > Preferences > Privacy (macOS). Enable Prevent cross-site tracking and use Manage Website Data to remove stored cookies by site.
Microsoft Edge: Go to Settings > Cookies and site permissions > Cookies and data stored. You can block third-party cookies, clear cookies on browser close, or manage exceptions per site.
For more information, visit your browser's official help documentation.
9. Opt-Out Links
| Service | Opt-Out Method | Link |
|---|---|---|
| Google Analytics | Browser add-on that prevents GA from collecting data across all sites | tools.google.com/dlpage/gaoptout |
| Google Analytics | Google's My Activity dashboard — manage and delete your activity data | myactivity.google.com |
| PostHog (dashboard only) | Use the Consent Preferences control in the dashboard menu, or contact privacy@codextitan.com, to opt out of PostHog product analytics and session recording | posthog.com/docs/privacy |
| Sentry (marketing Site) | Decline the Analytics category under Consent Preferences (marketing Site Sentry runs under the Analytics category) | sentry.io/privacy |
| Google (advertising settings) | Google's Ad Settings dashboard — manage ad personalization across Google services. No Google advertising tags run on the Site, the admin dashboard, or the support portal. | adssettings.google.com |
| Cloudflare | Cloudflare operates as network infrastructure (CDN and security). It processes traffic as a data processor on our behalf. Opt-out is not applicable — disabling Cloudflare would prevent access to the Site entirely. | N/A |
| Stripe | Stripe cookies are strictly necessary for fraud prevention on the admin dashboard. Opt-out is not available. | stripe.com/privacy |
10. Impact of Disabling Cookies
| Category | If Disabled |
|---|---|
| Strictly Necessary | You cannot sign in to a support portal, and the admin dashboard may not work correctly. Payment flows may fail. Security protections (bot detection, fraud prevention) will be impaired. |
| Analytics | We will not collect analytics data about your visit: no Google Analytics on the Site, no PostHog analytics or session recordings on the admin dashboard, and no usage analytics on the support portal. (Each help article still keeps a running total of how many times it has been opened, which records nothing about who opened it.) There is no impact on platform features, functionality, or your ability to use Codex Titan. |
| Marketing | No marketing cookies are currently set, so disabling this category has no effect at this time. If marketing cookies are introduced in the future, disabling them would stop advertising campaign measurement, with no impact on platform features or functionality. |
| Functional | No functional cookies are currently set, so disabling this category has no effect at this time. If functional cookies are introduced in the future, disabling them may affect enhanced features such as personalization or language preferences. |
11. Changes to This Policy
The effective date at the top of this document reflects when this Cookie Policy was last updated. We update this policy when our cookie practices change.
Material changes — defined as adding a new cookie category (e.g., introducing marketing cookies), adding a new third-party provider that sets cookies, or changing the purpose of an existing cookie — will result in an updated effective date and a re-prompt of the consent banner so that you can review and re-confirm your preferences.
Non-material changes — such as correcting a cookie duration, updating a provider's privacy policy link, or clarifying descriptive language — will be reflected in an updated effective date only. The consent banner will not be re-triggered for non-material updates.
We encourage you to review this policy periodically. Continued use of the Site after an effective date constitutes acknowledgment of the updated policy.
All prior versions of this Cookie Policy are available upon request by contacting privacy@codextitan.com.
12. Contact
If you have questions about this Cookie Policy or wish to exercise any rights related to cookie-based data processing, please contact us:
RB ZILLA LLC — Codex Titan Email: privacy@codextitan.com Website: https://www.codextitan.com Mailing Address: 116 E Main St, Suite 201, Rock Hill, SC 29730, United States
For general support inquiries, visit https://www.codextitan.com.
This Cookie Policy covers cookies and similar technologies on https://www.codextitan.com and, where expressly noted, related Codex Titan product surfaces (admin dashboard and portal). For our complete data practices, including how we handle personal data submitted through the Codex Titan API and admin dashboard, please review our Privacy Policy.