Cookie Policy
This Cookie Policy describes the cookies and similar technologies that Rexplore Inc. ("Rexplore," "we," "us," or "our") uses on rexplore.xyz and related marketing pages (collectively, the "Site"), which third-party services may set them, how long they last, and how you can control or withdraw your consent at any time. It supplements our Privacy Policy and should be read together with it.
1. What Cookies Are
Cookies are small text strings that a site stores on your device. They let the site remember your device or choices the next time you visit. In this Policy we use "cookies" as a shorthand for cookies and for similar technologies such as localStorage, sessionStorage, IndexedDB, tracking pixels, and SDK identifiers that perform comparable functions.
Cookies can be:
- First-party — set by the domain you are visiting (
rexplore.xyz). - Third-party — set by another domain whose content is embedded on the Site, such as an analytics or chat provider.
- Session — removed automatically when you close the browser.
- Persistent — remain until they expire or you delete them.
2. How We Group Cookies
We group cookies into three categories. Only the first is set before you make a choice; the other two remain off until you opt in through the banner or the cookie settings modal. A future fourth category for marketing tags is reserved — it is not shown in the consent modal today because we do not yet load any marketing partner, and a "specific" consent under GDPR / PIPA cannot be collected for vendors that have not been disclosed.
2.1 Strictly Necessary Essential
Required to run the Site. These technologies store your privacy choices, protect against abusive requests, and keep the Site functional. No consent is required for cookies that are strictly necessary to provide a service you explicitly requested.
| Purpose | Provider | Storage | Duration |
|---|---|---|---|
| Consent preference storageRemembers your cookie choices so the banner does not reappear on every visit. | Rexplore (first-party) | localStorage (obfuscated) | Up to 180 days |
| Session / request integrityProtects against cross-site request forgery and abuse on any forms we add in the future. | Rexplore (first-party) | HTTP cookie (session) | Session |
| Hosting platform sessionSet by our hosting platform to serve the correct edge region and protect against abuse. | Vercel Inc. (USA) | HTTP cookie | Session to 1 year |
2.2 Functional Optional
Remember preferences you actively set (language, display) so we can personalize the experience when you return. Functional cookies are disabled until you opt in.
| Purpose | Provider | Storage | Duration |
|---|---|---|---|
| Language preferenceRemembers the language you actively selected so the correct localization loads on your next visit. | Rexplore (first-party) | localStorage | Up to 12 months |
| Chat widget sessionIf you open the Chaton chat widget, Chaton stores a visitor identifier so the same conversation can be continued. | Chaton (third-party) | localStorage + cookies | Up to 12 months |
2.3 Analytics Optional
Help us understand how visitors interact with the Site so we can improve content, performance, and navigation. Analytics cookies are disabled until you opt in. If your browser sends a Global Privacy Control signal, analytics cookies stay off.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 (Google LLC) | Distinguishes unique visitors | 2 years |
_ga_<container> | Google Analytics 4 (Google LLC) | Persists GA4 session state | 2 years |
_gid | Google Analytics (Google LLC) | Distinguishes users within 24 hours | 24 hours |
_gat* | Google Analytics (Google LLC) | Throttles request rate | 1 minute |
| Cloudflare Web Analytics beacon | Cloudflare, Inc. (USA) | Privacy-first page-view measurement (no cookies used) | No storage |
| Rexplore product telemetryA first-party pageview beacon we operate from our Vercel dashboard. Does not contain advertising identifiers. | Rexplore (first-party, served from Vercel) | Internal analytics | Session to 12 months |
2.4 Marketing Reserved
Rexplore does not currently set any marketing cookies on this Site, and the marketing toggle is not present in the cookie settings modal. Before any marketing vendor is loaded, we will (a) disclose the specific vendors in this Policy, (b) re-enable the marketing toggle, and (c) prompt every visitor for a fresh consent. Candidates we are evaluating — none of which are loaded today — include Meta Pixel (Meta Platforms, Inc.), TikTok Pixel (TikTok Ltd.), and Google Ads Conversion (Google LLC).
3. Third-Party Services the Site Relies On
The Site loads content from several third-party services. Some set cookies only after you opt in; some never set cookies but may still log your IP address as part of normal internet traffic. We disclose every third party below for transparency.
Google Analytics 4 & Google Tag Manager Analytics
- Role
- Measures aggregate traffic, retention, and content performance.
- Data processed
- IP address (truncated), user agent, referring URL, page URL, timestamp, randomly generated client identifier.
- Storage
- Cookies (
_ga,_ga_<id>,_gid,_gat*) set on.rexplore.xyz. - Transfer
- United States and other countries where Google operates; EU-US Data Privacy Framework.
- Loads when
- Only after you opt in to Analytics. Google Consent Mode v2 defaults all Google storage to denied.
Cloudflare Web Analytics Analytics
- Role
- Measures page-view count and basic performance without profiling visitors.
- Data processed
- URL, timing information, viewport size, country-level geolocation derived from IP. No persistent identifier.
- Storage
- No cookies or localStorage set. Cloudflare Web Analytics is cookie-less by design.
- Transfer
- Cloudflare global edge network.
- Loads when
- On every page, because no personal data is stored on your device.
Vercel Hosting & Speed Insights Essential
- Role
- Hosts the Site and routes your request to the closest edge server.
- Data processed
- IP address, request headers, HTTP access logs, platform error telemetry.
- Storage
- Platform cookies for routing / abuse protection; first-party pageview beacon (
/t.js) that we operate for product telemetry. - Transfer
- United States and Vercel global regions.
- Loads when
- Hosting is essential. The telemetry beacon remains off for personalization and advertising purposes.
Chaton (Live Chat Widget) Functional
- Role
- Lets you start a live conversation with our support team.
- Data processed
- Visitor identifier, chat transcript, basic device metadata.
- Storage
- localStorage and cookies set by Chaton on
chaton.work. - Transfer
- As described in Chaton's privacy policy.
- Loads when
- Loaded for widget availability; identifiers are only written to your device if you open the widget and start a conversation.
Google Fonts Essential
- Role
- Serves the Inter web font used across the Site.
- Data processed
- IP address, user agent, referring URL (to deliver the font file).
- Storage
- No cookies. Browsers cache the font file for one year.
- Transfer
- Google global CDN.
- Loads when
- On every page — required for typography.
Unsplash (Image CDN) Essential
- Role
- Hosts a small number of hero and newsroom images.
- Data processed
- IP address, user agent, referring URL.
- Storage
- No cookies set on your device.
- Transfer
- Unsplash global CDN.
- Loads when
- Whenever an image is displayed.
Marketing Partners Reserved
- Current state
- Zero vendors. The marketing toggle is hidden from the cookie settings modal to avoid collecting consent without named vendors.
- Before loading
- We will disclose the specific vendor and purpose in this Policy, re-enable the marketing toggle, and ask every visitor for fresh consent.
4. Legal Basis for Processing
Depending on your location, we rely on the following legal bases:
- Republic of Korea — PIPA (개인정보보호법) § 15, 22, 39-3: consent for optional categories, legitimate operation of the service for strictly necessary technologies.
- European Economic Area & United Kingdom — GDPR: consent (Art. 6(1)(a)) for optional categories; legitimate interest (Art. 6(1)(f)) for strictly necessary technologies; ePrivacy Directive Art. 5(3) for storing or reading information on your device.
- United States — CCPA / CPRA and equivalent state laws: we honor opt-out preference signals including Global Privacy Control.
5. Your Choices
- Cookie settings modal — open it from the footer of any page or the floating consent banner on your first visit. You can accept all, allow essential only, or toggle categories individually.
- Withdraw consent — re-open the cookie settings and move any toggle to off. Withdrawal takes effect immediately and does not affect the lawfulness of earlier processing.
- Browser controls — block or delete cookies at any time through your browser settings. Blocking strictly necessary cookies may prevent the Site from remembering your privacy choices.
- Global Privacy Control (GPC) — if your browser sends a GPC signal we treat it as an opt-out and keep optional cookies off.
- Analytics opt-out — install Google's opt-out browser add-on.
- Account-level privacy controls — a future web version of Rexplore will let you download or delete your account data from within the product. Until then, see Privacy Policy for the email-based request channel.
6. How We Store Your Consent
Your cookie choices are saved to the Site in an obfuscated form so the banner does not reappear on every visit. We do not send your consent record to a third party, and we do not fingerprint your device. The consent record expires after 180 days, after which we will invite you to review your choices again.
7. Retention
Each cookie above lists its own maximum lifetime. If you clear your browser or site data, all cookie-based preferences reset and the banner will reappear.
8. International Transfers
Some providers listed above are based in the United States or process data globally. Where applicable we rely on the safeguards the provider has in place, including the EU-US Data Privacy Framework, Standard Contractual Clauses, and the Korean Personal Information Protection Commission's cross-border transfer notifications.
9. Do Not Track
We honor Global Privacy Control as an opt-out preference signal. Because there is no industry consensus on the legacy "Do Not Track" header, we do not respond to it specifically — but any browser that sends DNT and supports GPC will be treated as opted out through GPC.
10. Changes to This Policy
We may update this Policy to reflect changes in the technologies we use, legal requirements, or business practices. The "Last Updated" date above reflects the most recent revision. Where a change materially expands the cookies we set, we will request a fresh consent before the change takes effect.
11. Contact
For questions about this Cookie Policy or to exercise your privacy rights, contact privacy@rexplore.xyz. For postal correspondence, write to Rexplore Inc., attention: Privacy Office.