Cookie Policy
Last updated 31 August 2026
This Cookie Policy explains how Raphael Benhamou, an individual at Carrer de Sant Antoni Abat, 39, 08001 Barcelona, Spain, who operates Lexycraft (“Lexycraft”, “we”, “us”), uses cookies and similar technologies on app.lexycraft.com and Lexycraft's public web pages at lexycraft.com.
What are cookies and similar technologies?
Cookies are small records stored by a website in your browser. Similar technologies include local and session storage, scripts that read browser or device information, and browser reporting policies. These technologies can be covered by cookie rules even when no traditional cookie is written or the information is not directly identifying by itself.
Necessary technologies
We use the following technologies to provide features you request, secure your account, carry an active workflow between pages, or remember a choice you make. They are not used for advertising and do not require cookie consent.
| Technology | Why we use it | How long it lasts |
|---|---|---|
| Authentication session (sb-xzhqvtokhjeofnqhbrit-auth-token) | Keep you signed in and securely refresh your authenticated session | Until sign-out, invalidation, site-data clearing or browser eviction; individual tokens expire and refresh sooner |
| Consent choices (lexycraft:cookie-consent:v2) | Enforce and remember your separate choices for optional analytics and browser diagnostics | 12 months from the original choice, or until you change it or clear site data |
| Account security and email-change state (lexycraft:last-auth-user-id, lexycraft:pending-email-change) | Stop local state crossing between accounts and complete an email change you request | Until replaced or cleared by the account flow, site-data clearing or browser eviction |
| In-progress auth, Extract, Lesson, Roleplay, Smart Lesson and Quick/Daily Training storage | Return to a requested page, transfer your selected setup, prevent duplicate requests and recover an operation in the current tab | The current browser tab/session, often less because Lexycraft clears it after use |
| Workflow continuity (lexycraft:daily-training:active-session-id, lexycraft:onboarding:v1:<user-id>, lexycraft:web-library-lesson-intent:v1:<user-id>) | Resume Daily Training or onboarding, or safely retry a Lesson request whose response was interrupted without creating it twice | Until completion, a confirmed Lesson-creation outcome, abandonment or replacement, reset, site-data clearing or browser eviction |
| Acknowledgement and resume choices (lexycraft:firstSessionResume:v1:<user-id>, lexycraft:consistency:acknowledged:v1:<user-id>) | Remember a prompt you started, dismissed or acknowledged so it is not immediately repeated | Until reset or clearing; consistency acknowledgements expire in Lexycraft after 30 days |
| Interface and local settings (lexycraft:appearance, lexycraft:sidebar-state, lexycraft_story_auto_scroll_enabled, lx_local_settings) | Remember theme, sidebar, story auto-scroll and local reminder/challenge choices | Until you change them, clear site data or the browser evicts them |
| Network security challenge (cf_clearance, conditional) | Prove that a visitor passed a security challenge used by JavaScript Detections or Browser Integrity Check, and avoid repeating it during the challenge passage | Up to 30 minutes under Lexycraft's current challenge-passage setting |
The public Pack pages do not set a Lexycraft application cookie or use Web Storage. The security challenges run by our network provider are conditional, so most visitors may never receive cf_clearance. Blocking necessary storage can sign you out, interrupt active workflows, forget interface choices or repeat a security challenge.
Optional technologies
Clarity and browser Sentry are not necessary to use Lexycraft. You can allow or reject each of those purposes independently, and a provider does not load or initialize unless you allow its purpose. The table also discloses browser Network Error Logging, which is currently active outside the in-product settings and is not consent-gated.
| Purpose | Provider or technology | Why we use it | Storage and duration |
|---|---|---|---|
| Analytics | Microsoft Clarity | Understand page use and interactions so we can improve the web product. Clarity Bot Detection is enabled. Google Analytics, Google Ads and Microsoft Ads integrations are not connected. | Lexycraft's current Clarity project-cookie setting is off, so Clarity project cookies are not used. After analytics consent, the SDK uses page-lifetime browser context and sends analytics to Microsoft. Ad storage is always denied. |
| Diagnostics & performance | Sentry browser monitoring | Diagnose frontend errors and measure browser performance. Production performance traces are sampled at 10%; an event may be associated with the authenticated account ID. | After diagnostics consent, the configured path uses in-memory page/session context and sends selected events to Sentry; it does not create a persistent Sentry cookie or Web Storage key. Replay is off, and automatic collection of cookies, request/response headers and bodies, and default personal information is disabled. |
| Network reliability (currently ungated) | Network Error Logging (Report-To / NEL, group cf-nel) | Measure network failures affecting app.lexycraft.com | The app hostname currently asks the browser to retain the reporting policy for up to 7 days and send network-failure reports to our network provider. This is a browser policy, not a traditional cookie. It is not controlled by Lexycraft's Cookie settings and is currently enabled without an in-product consent choice. |
Lexycraft does not use the technologies above for advertising. The audited web implementation does not contain Google Analytics, Meta advertising pixels or Sentry Replay.
Your choices
On your first visit, Lexycraft offers Accept optional and Reject optional together. Accepting allows both optional purposes; rejecting keeps both off. Review details lets you choose Analytics and Diagnostics & performance independently. If you do not choose, Clarity and browser Sentry remain uninitialized and the core service stays available.
Authenticated users can reopen Profile → Privacy → Cookie settings at any time. Cookie settings are also available from the sign-in and account-creation pages. The choices apply only to the current browser and origin; they are not stored as account preferences.
If you withdraw a purpose, Lexycraft records the new choice first and sends that provider's supported revocation, erase or shutdown call. The page reloads when needed to complete Clarity teardown. Withdrawal does not affect processing that was lawful before it.
Browser controls can also delete or block site data, but they do not replace Lexycraft's in-product choice. Deleting the consent record makes Lexycraft ask again; blocking necessary technologies can break the functions described above.
Changes to this Policy
We may update this Policy when our technologies, providers or legal obligations change. The Last updated date shows the latest revision. If a change adds a new optional purpose, we will request consent before using it for that purpose.
Contact and Privacy Policy
For questions about cookies and similar technologies, write to Raphael Benhamou at privacy@lexycraft.com, or by post at Carrer de Sant Antoni Abat, 39, 08001 Barcelona, Spain.
For information about how Lexycraft handles personal data, your rights and the providers involved, see our Privacy Policy.
The agreement for using Lexycraft is set out in our Terms of Service.