Browser storage
Cookie Notice
The small set of cookies used to keep you signed in and protect a hosted test payment.
Two first-party cookiesOne supports signed-in sessions and one supports the hosted payment page.
No ad trackingThere is no advertising cookie, analytics tag, or tag manager on the site.
Easy to removeDelete cookies in your browser at any time; signed-in sessions will end.
Cookies LaxoPay sets
| Name | Purpose | Type | Path | Duration | Required |
|---|---|---|---|---|---|
laxo_session | Signed-in session and CSRF protection | First-party, HttpOnly, Secure in production | / | 14 days | Yes |
laxo_pay | Hosted test payment CSRF protection | First-party, HttpOnly, Secure in production | /pay | 1 hour | Yes for checkout |
Delivery
A deployment proxy may sit in front of the site and set a strictly necessary protection cookie. Identify that proxy and link its policy here before publication. Public pages can be cached; pages behind a session and the API are not served from that cache.
What is not present
There is no analytics cookie, no advertising cookie, and no tag manager. A cookie banner is not used to switch on optional tracking, because that tracking is not loaded.
How to refuse them
You can delete cookies in the browser. Deleting laxo_session signs you out. Deleting laxo_pay only affects an open hosted payment page. The privacy notice explains the account data behind these cookies.