Legal
Cookie Policy
Last updated: September 8, 2026
This Cookie Policy explains what cookies Signal, a digital product operated by ONX, uses across its dashboard (app.signal…) and connected merchant apps, and why.
1. What we use — strictly necessary cookies only
Signal currently sets only strictly-necessary cookies required to keep you signed in. We do not use advertising cookies, third-party analytics cookies, or cross-site tracking of any kind.
| Cookie | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
returns_risk_session | Signal dashboard (app) | Keeps you signed in to your merchant dashboard; encrypted, not readable by scripts (HttpOnly) | 8 hours | Strictly necessary |
*_session (Laravel session cookie) | Signal backend API / Shopify connector | Maintains a secure server-side session for the API and the Shopify connector's merchant setup page | Session / per server configuration | Strictly necessary |
2. Do we need your consent for these?
Under the EU/UK ePrivacy rules (and equivalent laws elsewhere), cookies that are strictly necessary to provide a service you've asked for — like staying logged in — are exempt from the requirement to obtain prior consent, though we still have to tell you about them, which is what this page does. Because Signal does not currently set any analytics, advertising, or preference cookies, we have not implemented a cookie-consent banner, since it would not add any real choice for you (there is nothing non-essential to opt out of yet) and would only add friction.
This conclusion depends on staying strictly-necessary-only. If Signal later adds analytics (e.g. product-usage tracking), advertising pixels, session-replay tools, or any cookie whose purpose is not directly required to deliver the Service you asked for, a compliant consent banner (with a real accept/reject choice, active before those cookies fire) must be added at that time, and this policy must be updated to list the new cookie(s), their provider, and retention period.
3. Your choices
Most browsers let you block or delete cookies through their settings. Because Signal's only cookie is what keeps your dashboard session signed in, blocking it will simply sign you out and require you to log in again each visit — it will not affect any tracking, since none occurs.
4. Changes to this policy
We will update this page whenever the cookies we use change, and — per Section 2 — will put a consent mechanism in place before any non-essential cookie is introduced, not after.
5. Contact us
Questions about this Cookie Policy: privacy@onx.digital